PYSEC-2026-4353
PyPI vllm · Upgrade to 0.30.0 or later · >= 0.20.0, < 0.30.0 · CVE-2026-116178 · GHSA-34qw-q2h2-jp3m
Published open-source security advisories, matched to the exact versions you run.
Run in a terminal
claude mcp add --scope user --transport http patchnext https://mcp.patchnext.com && claude mcp login patchnext
Your browser opens: sign in and choose what the agent may read.
Then ask: What do I need to patch on this machine?
1–4 of 4 matching · newest first
PyPI vllm · Upgrade to 0.30.0 or later · >= 0.20.0, < 0.30.0 · CVE-2026-116178 · GHSA-34qw-q2h2-jp3m
PyPI vllm · Upgrade to 0.25.0 or later · >= 0.10.2, < 0.25.0 · CVE-2026-116177 · GHSA-mm38-5g96-7j6x
PyPI vllm · Upgrade to 0.24.0 or later · >= 0.9.2, < 0.24.0 · CVE-2026-116176 · GHSA-vfp2-c8pq-v6h6
PyPI vllm · Upgrade to 0.24.0 or later · >= 0.22.0, < 0.24.0 · CVE-2026-116173 · GHSA-6pgw-f3pv-4h8q
A vendor fix does not resolve your finding until you verify it in your own systems.
Security reports that are not matched to your stack.
Listed as news: the source report lacks affected versions, a fix, or verified evidence.
Listed as news: the source report lacks affected versions, a fix, or verified evidence.
Listed as news: the source report lacks affected versions, a fix, or verified evidence.
Listed as news: the source report lacks affected versions, a fix, or verified evidence.
Listed as news: the source report lacks affected versions, a fix, or verified evidence.