{"data":{"id":"5a27ee9e-cb86-4dc9-a013-fc8e66b2b0c1","title":"GHSA-8jr5-v98p-w75m: vLLM: image EXIF Rotation & PNG tRNS Transparency Not Normalized, Causing Mismatch Between Model Input and Expectations","summary":"GHSA-8jr5-v98p-w75m affects vLLM's image input handling in vllm/multimodal/image.py. The code never calls ImageOps.exif_transpose, so EXIF orientation is not normalized, and PNGs carrying tRNS transparency in P, L or RGB modes take the image.convert(\"RGB\") path without being flattened against a background, so transparent or overlay content can become visible and change the pixels the model receives. Pillow also loads only the first frame of APNG and GIF files.","solution":"A fix for this vulnerability was merged here: https://github.com/vllm-project/vllm/pull/44974","labels":["security"],"sourceUrl":"https://github.com/advisories/GHSA-8jr5-v98p-w75m","publishedAt":"2026-06-17T14:02:42.000Z","cveId":null,"cweIds":null,"cvssScore":null,"cvssSeverity":"medium","severity":"medium","attackType":["model_evasion"],"issueType":"vulnerability","affectedPackages":["vllm@>= 0.11.0, <= 0.23.0"],"affectedPackageNames":["vllm"],"affectedPackageRefs":["pypi:vllm"],"affectedVendors":[],"affectedVendorsRaw":["vLLM"],"classifierModel":"claude-haiku-5-5","classifierPromptVersion":"v4","summaryPromptVersion":"v2","headline":null,"headlinePromptVersion":null,"cvssVector":null,"attackVector":null,"attackComplexity":null,"privilegesRequired":null,"userInteraction":null,"exploitMaturity":null,"epssScore":null,"epssCheckedAt":null,"kevDateAdded":null,"advisoryAliases":["GHSA-8jr5-v98p-w75m"],"affectedPackagesSource":null,"affectedPackagesCheckedAt":null,"patchAvailable":null,"disclosureDate":"2026-06-17T14:02:42.000Z","fixReleasedAt":null,"daysToFix":null,"fixCheckedAt":null,"capecIds":null,"crossRefCount":0,"attackSophistication":"moderate","impactType":["integrity"],"aiComponentTargeted":"inference","llmSpecific":false,"classifierConfidence":0.9,"researchCategory":null,"atlasIds":null,"fixes":[]}}