Database/AI/ML frameworks & serving
vLLM (`load_from_url_async`): Bypass of the CVE-2026-24779 SSRF fix
CVE-2026-25960AI/ML frameworks & servingcurated
Impact
Bypass of the CVE-2026-24779 SSRF fix
Who can reach it
Unauthenticated request
What to do
Upgrade past 0.15.1. Third SSRF in the same connector — network-layer egress control is the only durable fix
References
This entry is curated: imported from vendor advisories with machine assistance, not yet individually verified. Confirm against your vendor's advisory before acting, and report anything wrong.