iHore/vLLM
8
0
Fork 0
Code Issues Pull Requests Actions 1 Packages Projects Releases Wiki Activity
23,341 Commits 3 Branches 0 Tags
49d708e158f7b7cfbb00c26f088cd9139c0cf180
Commit Graph
57 Commits
This Branch
This Branch
All Branches
Author SHA1 Message Date
Juan Pérez de AlgabaandOpenAI Codex 5d88c034f6 [Security] Reject local verifier references in Speculators metadata (#61587) 
Signed-off-by: Juan Pérez de Algaba <jperezde@redhat.com>
Co-authored-by: OpenAI Codex <noreply@openai.com>
 2026-10-14 15:30:20 +00:00
Juan Pérez de AlgabaandOpenAI Codex 7173c64e2e [Security] Bound decoded and downloaded media per request (#61226) 
Signed-off-by: juanpas97 <juan.perezalgaba@gmail.com>
Signed-off-by: Juan Pérez de Algaba <jperezde@redhat.com>
Co-authored-by: OpenAI Codex <codex@openai.com>
 2026-10-13 10:17:14 +00:00
Juan Pérez de AlgabaRobert ShawItay Etelis
 		93d2cab35e [Security] Fix P2P ZMQ socket exhaustion via unbounded peer sessions (#51504) 
Signed-off-by: jperezde <jperezde@redhat.com>
Signed-off-by: Juan Pérez de Algaba <jperezde@redhat.com>
Co-authored-by: Robert Shaw <114415538+robertgshaw2-redhat@users.noreply.github.com>
Co-authored-by: Itay Etelis <92247226+Etelis@users.noreply.github.com>
 2026-10-11 11:39:11 -04:00
Juan Pérez de AlgabaandCyrus Leung fcae5c9887 [Security] Restrict default CORS origins (#61009) 
Signed-off-by: Juan Pérez de Algaba <jperezde@redhat.com>
Co-authored-by: Cyrus Leung <tlleungac@connect.ust.hk>
 2026-10-11 08:26:02 +00:00
Juan Pérez de Algabaandmergify[bot] <37929162+mergify[bot]@users.noreply.github.com> 3d52578e13 [Security] Do not retain Phi-4 MM audio attention matrices (#60614) 
Signed-off-by: Juan Pérez de Algaba <jperezde@redhat.com>
Co-authored-by: mergify[bot] <37929162+mergify[bot]@users.noreply.github.com>
 2026-10-09 22:23:35 +08:00
Juan Pérez de Algaba 710ac56e69 [Security] Restrict Pillow image formats on untrusted media paths (#60022) 
Signed-off-by: Juan Pérez de Algaba <jperezde@redhat.com>
 2026-10-05 10:40:15 +00:00
Juan Pérez de Algaba c15672cfb4 [Security] Accept zero-sum DeepSeek-OCR pixel tensors (#59417) 
Signed-off-by: Juan Pérez de Algaba <jperezde@redhat.com>
 2026-10-02 09:17:12 +00:00
Juan Pérez de AlgabaandCursor cff08b461e [Security] Fix chat template resource-exhaustion DoS (GHSA-4hhp-h66f-… (#50300) 
Signed-off-by: jperezde <jperezde@redhat.com>
Signed-off-by: Juan Pérez de Algaba <jperezde@redhat.com>
Co-authored-by: Cursor <cursoragent@cursor.com>
 2026-09-30 08:32:00 -07:00
Juan Pérez de AlgabaandCursor eef8b15d7c [Security] Bump pyjwt and rand for remaining GHSAs (#59427) 
Signed-off-by: Juan Pérez de Algaba <jperezde@redhat.com>
Co-authored-by: Cursor <cursoragent@cursor.com>
 2026-09-30 14:26:16 +00:00
Juan Pérez de AlgabaandCursor a4c4bb418e [Security] Bump remaining Dependabot packages (excl. ignored) (#59315) 
Signed-off-by: Juan Pérez de Algaba <jperezde@redhat.com>
Co-authored-by: Cursor <cursoragent@cursor.com>
 2026-09-30 05:16:31 -07:00
Juan Pérez de AlgabaandCursor eec2a86b1e [Security] Bump nltk, aiohttp, pillow, and datamodel-code-generator (#59249) 
Signed-off-by: Juan Pérez de Algaba <jperezde@redhat.com>
Co-authored-by: Cursor <cursoragent@cursor.com>
 2026-09-29 16:00:36 -07:00
Juan Pérez de AlgabaandCursor 31f2e70cd3 [Security] Gate per-request multimodal processor kwargs (#58830) 
Signed-off-by: Juan Pérez de Algaba <jperezde@redhat.com>
Co-authored-by: Cursor <cursoragent@cursor.com>
 2026-09-26 11:10:35 +00:00
Juan Pérez de Algaba 4800024b98 [Security] Reject min_tokens that exceeds the filled max_tokens default (#57731) 
Signed-off-by: Juan Pérez de Algaba <jperezde@redhat.com>
 2026-09-22 05:50:23 +00:00
Juan Pérez de AlgabaandCursor 7268f6e38e [Security] Prefer fresh multimodal payloads over a stale receiver cache (#57833) 
Signed-off-by: Juan Pérez de Algaba <jperezde@redhat.com>
Co-authored-by: Cursor <cursoragent@cursor.com>
 2026-09-21 12:50:48 +00:00
Juan Pérez de AlgabaandCursor ea723c81c3 [Security] Cap Qwen-VL video sampling knobs (#56729) 
Signed-off-by: Juan Pérez de Algaba <jperezde@redhat.com>
Co-authored-by: Cursor <cursoragent@cursor.com>
 2026-09-14 10:22:18 +00:00
Juan Pérez de AlgabaandCursor 08426d51ef [Docs][Security] Clarify reporter credit and CVE publication timing (#55476) 
Signed-off-by: Juan Pérez de Algaba <jperezde@redhat.com>
Co-authored-by: Cursor <cursoragent@cursor.com>
 2026-09-10 10:19:39 +00:00
Juan Pérez de AlgabaBugen ZhaoOpenAI Codex
 		3735c2d5f5 [Security][Rust Frontend] Normalize HTTP method labels in metrics (#56058) 
Co-authored-by: Bugen Zhao <i@bugenzhao.com>
Co-authored-by: OpenAI Codex <noreply@openai.com>
Signed-off-by: Juan Pérez de Algaba <jperezde@redhat.com>
Signed-off-by: Bugen Zhao <i@bugenzhao.com>
 2026-09-10 10:54:40 +08:00
Juan Pérez de AlgabaandIsotr0py 8b6de0eb9a [Security] Cap GLMGA video sampling to prevent request-driven resource exhaustion (#54935) 
Signed-off-by: jperezde <jperezde@redhat.com>
Signed-off-by: Isotr0py <Isotr0py@outlook.com>
Co-authored-by: Isotr0py <Isotr0py@outlook.com>
 2026-09-04 12:02:41 +00:00
Juan Pérez de Algaba e79961c946 [codeowners] Add jperezdealgaba to security file ownership (#54358) 
Adds Juan Pérez de Algaba (`@jperezdealgaba`) alongside Russell Bryant as a CODEOWNER for the vLLM security guide, security policy, and vulnerability-management documentation.
 2026-08-30 16:24:21 +00:00
Juan Pérez de Algaba 1dc464d426 [Bugfix] Bound cache_salt length to prevent DoS via scheduler CPU exhaustion (#54353) 
Signed-off-by: jperezde <jperezde@redhat.com>
 2026-08-30 04:28:16 +00:00
Juan Pérez de Algaba 0d7d5ed0b2 fix(security): enforce VLLM_MAX_AUDIO_CLIP_FILESIZE_MB on all audio paths (#53561) 
Signed-off-by: jperezde <jperezde@redhat.com>
 2026-08-24 21:37:02 +00:00
Juan Pérez de Algaba 9f295fe8ce [Docs][Security] Document multimodal media UUID security implications (#53582) 
Signed-off-by: jperezde <jperezde@redhat.com>
 2026-08-24 07:19:18 -07:00
Juan Pérez de Algaba e00a034ad1 (security) fix: enforce decoder prompt-length validation for skip-che… (#46588) 
Signed-off-by: jperezde <jperezde@redhat.com>
 2026-08-21 09:07:19 -07:00
Juan Pérez de Algaba c0a25c089a [Bugfix][Security] Guard _load_ov2_processor with resolve_trust_remote_code (#52952) 
Signed-off-by: jperezde <jperezde@redhat.com>
 2026-08-20 09:09:49 +00:00
Juan Pérez de Algaba ceb340e2eb fix: prevent PyNvVideoCodec decoder slot limit bypass via ClassVar shadowing (#52126) 
Signed-off-by: jperezde <jperezde@redhat.com>
 2026-08-17 17:45:40 +00:00
Juan Pérez de Algaba 37c3bdf5a7 fix(security): enforce audio decode duration limit in NanoNemotronVL (#50221) 
Signed-off-by: jperezde <jperezde@redhat.com>
 2026-08-13 03:31:55 -07:00
Juan Pérez de AlgabaandCursor 640a09086d Fix DoS via sample-rate forgery bypassing audio decode duration guard (#49948) 
Signed-off-by: jperezde <jperezde@redhat.com>
Co-authored-by: Cursor <cursoragent@cursor.com>
 2026-08-10 15:49:17 +00:00
Juan Pérez de Algaba d83eb0b36b fix(security): classify DeepStream as GPU backend and enforce pixel limits (#50755) 
Signed-off-by: jperezde <jperezde@redhat.com>
 2026-08-03 08:23:09 +00:00
Juan Pérez de Algaba 89d97d9a16 docs(security): document Ray cluster trust model and env var propagation (#50397) 
Signed-off-by: jperezde <jperezde@redhat.com>
 2026-07-30 11:52:55 +00:00
Juan Pérez de Algaba 793cf79c89 [Bugfix][Security] Fix concurrent sparse invariant race bypassing CVE remediation (#48583) 
Signed-off-by: jperezde <jperezde@redhat.com>
 2026-07-14 11:08:24 +00:00
Juan Pérez de Algaba c9a788eedc fix(security): guard lm-format-enforcer regex compile with timeout (#47595) 
Signed-off-by: jperezde <jperezde@redhat.com>
 2026-07-14 07:18:11 +00:00
Juan Pérez de Algaba 675f4295cd fix(security): bound completion prompt list to prevent unbounded engine fan-out (#47845) 
Signed-off-by: jperezde <jperezde@redhat.com>
 2026-07-07 22:48:20 +00:00
Juan Pérez de AlgabaandCursor b3e85be663 fix: use configured max_logprobs instead of hardcoded 20 in derender validation (#47834) 
Signed-off-by: jperezde <jperezde@redhat.com>
Co-authored-by: Cursor <cursoragent@cursor.com>
 2026-07-07 09:42:47 +00:00
Juan Pérez de Algabaandmergify[bot] <37929162+mergify[bot]@users.noreply.github.com> 8e61b646e2 fix(security): add resource bounds validation to derender endpoints (#47260) 
Signed-off-by: jperezde <jperezde@redhat.com>
Co-authored-by: mergify[bot] <37929162+mergify[bot]@users.noreply.github.com>
 2026-07-07 14:58:26 +08:00
Juan Pérez de Algabaandmergify[bot] <37929162+mergify[bot]@users.noreply.github.com> ba22152096 fix(security): block request-level GPU video backend selection withou… (#47259) 
Signed-off-by: jperezde <jperezde@redhat.com>
Co-authored-by: mergify[bot] <37929162+mergify[bot]@users.noreply.github.com>
 2026-07-06 02:36:49 -07:00
Juan Pérez de AlgabaRussell BryantRussell Bryant
 		5c4db60f01 docs(security): document gRPC interface as insecure for private use only (#45903) 
Signed-off-by: jperezde <jperezde@redhat.com>
Signed-off-by: Russell Bryant <russell.bryant@gmail.com>
Co-authored-by: Russell Bryant <russell.bryant@gmail.com>
Co-authored-by: Russell Bryant <rbryant@redhat.com>
 2026-07-01 12:39:57 +00:00
Juan Pérez de Algabaandmergify[bot] <37929162+mergify[bot]@users.noreply.github.com> c231d1f290 fix(security): bound tokenizer work when explicit truncation_side is set (#47007) 
Signed-off-by: jperezde <jperezde@redhat.com>
Co-authored-by: mergify[bot] <37929162+mergify[bot]@users.noreply.github.com>
 2026-06-30 23:08:51 +08:00
Juan Pérez de Algaba 364ee36af1 fix(security): prevent image decompression bomb OOM denial of service (#47010) 
Signed-off-by: jperezde <jperezde@redhat.com>
 2026-06-30 09:39:22 +00:00
Juan Pérez de Algaba 83fa302ca4 fix(security): prevent infinite loop in split_audio with NaN audio sa… (#46463) 2026-06-23 10:24:51 +00:00
Juan Pérez de AlgabaandIsotr0py f6ba720963 (security) Upgrade Starlette to >= 1.0.1 to fix CVE-2026-48710 (#45675) 
Signed-off-by: jperezde <jperezde@redhat.com>
Co-authored-by: Isotr0py <mozf@mail2.sysu.edu.cn>
 2026-06-18 12:35:13 -07:00
Juan Pérez de Algaba 3d20275bb4 fix(security): enforce audio decode duration limit in chat completions path (#45908) 
Signed-off-by: jperezde <jperezde@redhat.com>
 2026-06-17 11:07:13 +00:00
Juan Pérez de Algaba b997071ec4 (security) Enforce audio upload size limit before full file materialization (#45510) 
Signed-off-by: jperezde <jperezde@redhat.com>
 2026-06-15 10:25:24 +00:00
Juan Pérez de Algaba 470229c37e [Security] Fix DoS via prompt_embeds on M-RoPE models (#45252) 
Signed-off-by: jperezde <jperezde@redhat.com>
 2026-06-13 10:17:38 +00:00
Juan Pérez de AlgabaandHarry Mellor 2b3006076c [Security] Add timeout guard for regex compilation in structured outp… (#45118) 
Signed-off-by: jperezde <jperezde@redhat.com>
Signed-off-by: Harry Mellor <19981378+hmellor@users.noreply.github.com>
Co-authored-by: Harry Mellor <19981378+hmellor@users.noreply.github.com>
 2026-06-13 09:52:56 +00:00
Juan Pérez de Algaba f715f25f29 Fix misleading error for audio duration limit rejection (#45113) 
Signed-off-by: jperezde <jperezde@redhat.com>
 2026-06-12 09:58:08 +00:00
Juan Pérez de Algaba e62d00ab73 docs: add fix disclosure policy to SECURITY.md (#45253) 
Signed-off-by: jperezde <jperezde@redhat.com>
 2026-06-11 12:48:00 +00:00
Juan Pérez de Algabaandmergify[bot] <37929162+mergify[bot]@users.noreply.github.com> 9492362972 [Security] Apply sanitize_message to Anthropic and STT error paths (#45119) 
Signed-off-by: jperezde <jperezde@redhat.com>
Co-authored-by: mergify[bot] <37929162+mergify[bot]@users.noreply.github.com>
 2026-06-11 10:05:34 +00:00
Juan Pérez de Algaba d598d23973 [Security] Reject non-finite temperature and repetition_penalty values (#45116) 
Signed-off-by: jperezde <jperezde@redhat.com>
 2026-06-11 01:12:14 -07:00
Juan Pérez de Algaba f219788f91 [Security] Fix info disclosure via int32 truncation in GGUF dequantize kernels (#44971) 
Signed-off-by: jperezde <jperezde@redhat.com>
 2026-06-11 08:05:14 +00:00
Juan Pérez de Algaba 8a5cf1ccd6 [Security] Fix remote DoS via invalid recovered token reinjection (#44744) 
Signed-off-by: jperezde <jperezde@redhat.com>
 2026-06-10 02:31:43 -07:00
Juan Pérez de Algaba cf1c906724 [Security] Fix image EXIF orientation and tRNS transparency handling (#44974) 
Signed-off-by: jperezde <jperezde@redhat.com>
 2026-06-09 09:34:44 -07:00
Juan Pérez de Algaba 1b1359c332 [Security] Fix DoS via audio decompression bomb in speech-to-text endpoint (#44970) 
Signed-off-by: jperezde <jperezde@redhat.com>
 2026-06-10 00:18:53 +08:00
Juan Pérez de AlgabaandCyrus Leung d26a28ab03 fix: propagate revision/code_revision pins to all artifact boundaries (#42616) 
Signed-off-by: jperezde <jperezde@redhat.com>
Co-authored-by: Cyrus Leung <tlleungac@connect.ust.hk>
 2026-05-15 02:31:54 -07:00
Juan Pérez de Algabaandmergify[bot] <37929162+mergify[bot]@users.noreply.github.com> 5a6a9fc6f6 [docs] Added one new contact to the Vulnerability Management team (#42145) 
Signed-off-by: jperezde <jperezde@redhat.com>
Co-authored-by: mergify[bot] <37929162+mergify[bot]@users.noreply.github.com>
 2026-05-12 10:59:59 -04:00
Juan Pérez de Algaba 58ee614221 (security) Enforce frame limit in VideoMediaIO (#38636) 
Signed-off-by: jperezde <jperezde@redhat.com>
 2026-04-01 10:23:45 +00:00
Juan Pérez de Algaba 57861ae48d (security) Fix SSRF in batch runner download_bytes_from_url (#38482) 
Signed-off-by: jperezde <jperezde@redhat.com>
 2026-03-30 07:10:01 +00:00
Juan Pérez de AlgabaandRussell Bryant b111f8a61f fix(security): Add VLLM_MAX_N_SEQUENCES environment variable and enforce limit (#37952) 
Signed-off-by: jperezde <jperezde@redhat.com>
Signed-off-by: Russell Bryant <rbryant@redhat.com>
Co-authored-by: Russell Bryant <rbryant@redhat.com>
 2026-03-27 09:02:10 -04:00