All vulnerabilities

Servers and applications

GHSA-w4cg-mhc7-mgw3

MiniMax M3 video preprocessing permits request-driven CPU resource exhaustion through min_pixels

Severity
Medium 5.3
Published
27 Oct 2026
Last changed
27 Oct 2026
Added to UpHeron
3 Nov 2026
Fixed in
0.31.0
Sources
Project advisories (GitHub)

Affected software

SoftwareAffected versions
vLLMServers and applications · github:vllm-project/vllm
  • From 0.24.0 before 0.31.0

References