vLLM Audio Decompression-Bomb Fix: Enforce Audio Decode Duration Limit
Security Advisory
Medium
vLLM
Affected:
- vllm-project/vllm (pre-fix commits before PR #45908)
- odh-odh-pd/vllm-upstream (pre-fix commit before 4c4e4a9)
- EasyReal/EasyReal (pre-fix commits)
- RhizoNymph/vllm (pre-fix commit before 8c4c893)
- nkzhenhua/vllm (pre-fix commit before f7f3b4a)
Fixed in:
- vllm-project/vllm @ PR #45908 / commit 3220725
- odh-odh-pd/vllm-upstream @ commit 4c4e4a9
- EasyReal/EasyReal @ commit 2296568
- RhizoNymph/vllm @ commit 8c4c893
- nkzhenhua/vllm @ commit f7f3b4a
参照 CVE:
CVE-2026-57173 · 6.5
文章内图片已隐藏以节省流量 · 升级 Pro 后可见图片及离线存档
本文由本平台从 github.com 自动抓取，经 LLM 流水线清洗、双语翻译。版权归原作者。查看原文。