DirectorySecurity AdvisoriesPricing
Sign in
Security Advisories

CGA-gpv9-q8fx-2q2p

Package

py3.13-vllm-cuda-12.9

Component

vllm

Latest update

Unspecified

Aliases

Severity

7.5

High

CVSS V3

Eliminate CVEs with Chainguard hardened images

Build, ship, and run secure software with minimal, hardened container images — rebuilt from source daily and guarded under our industry-leading remediation SLA.

Start for free

References

  • https://nvd.nist.gov/vuln/detail/CVE-2026-41523

Updates

Status

Unspecified

Status

Pending upstream fix

Impact

Fixed upstream in vLLM 0.22.0 (commit b3c7ffcab82c2439726f8cb213800f6f38c023d3, PR vllm-project/vllm#43286). py3-vllm-cuda-12.9 is a frozen version stream pinned at vLLM 0.19.1; vLLM 0.22.0 cannot be adopted on this CUDA-12.9 stream (torchvision build not available). Backporting b3c7ffc to 0.19.1 touches a refactored pooling-metadata layout and a test absent at 0.19.1.

Status

Unspecified

Status

Under investigation


The trusted source for open source

Talk to an expert
PrivacyTerms

Product

Chainguard ContainersChainguard LibrariesChainguard VMsChainguard OS PackagesChainguard ActionsChainguard Agent SkillsIntegrationsPricing
© 2026 Chainguard, Inc. All Rights Reserved.
Chainguard® and the Chainguard logo are registered trademarks of Chainguard, Inc. in the United States and/or other countries.
The other respective trademarks mentioned on this page are owned by the respective companies and use of them does not imply any affiliation or endorsement.