vLLM Audio Decompression-Bomb Fix: Enforce Audio Decode Duration Limit
Security Advisory
Medium
vLLM
Affected:
- vllm-project/vllm (pre-fix commits before PR #45908)
- odh-odh-pd/vllm-upstream (pre-fix commit before 4c4e4a9)
- EasyReal/EasyReal (pre-fix commits)
- RhizoNymph/vllm (pre-fix commit before 8c4c893)
- nkzhenhua/vllm (pre-fix commit before f7f3b4a)
Fixed in:
- vllm-project/vllm @ PR #45908 / commit 3220725
- odh-odh-pd/vllm-upstream @ commit 4c4e4a9
- EasyReal/EasyReal @ commit 2296568
- RhizoNymph/vllm @ commit 8c4c893
- nkzhenhua/vllm @ commit f7f3b4a
Referenced CVEs:
CVE-2026-57173 · 6.5
文章内图片已隐藏以节省流量 · Upgrade to Pro to view images & offline archive
This content was auto-fetched from github.com, cleaned by our LLM pipeline, and translated to English. View original.