{"data":{"id":"719571ec-0132-4380-998d-102caab6e3ce","title":"GHSA-v359-jj2v-j536: vLLM has SSRF Protection Bypass","summary":"The SSRF protection fix in vLLM's `load_from_url_async` method, in `vllm/connections.py`, can be bypassed. The fix validates URLs with `urllib3.util.parse_url()`, but the actual requests use `aiohttp`, which relies on the `yarl` library. The two parsers handle backslash characters differently. A URL such as `https://httpbin.org\\@evil.com/` passes validation with host `httpbin.org` but is requested from `evil.com`, which lets an attacker bypass the hostname allowlist and reach arbitrary internal or external services.","solution":"Fixed by https://github.com/vllm-project/vllm/pull/34743","labels":["security"],"sourceUrl":"https://github.com/advisories/GHSA-v359-jj2v-j536","publishedAt":"2026-03-09T19:55:32.000Z","cveId":"CVE-2026-25960","cweIds":null,"cvssScore":null,"cvssSeverity":"medium","severity":"medium","attackType":["other"],"issueType":"vulnerability","affectedPackages":["vllm@>= 0.15.1, < 0.17.0 (fixed: 0.17.0)"],"affectedPackageNames":["vllm"],"affectedPackageRefs":["pypi:vllm"],"affectedVendors":[],"affectedVendorsRaw":["vLLM"],"classifierModel":"claude-haiku-5-5","classifierPromptVersion":"v4","summaryPromptVersion":"v2","headline":null,"headlinePromptVersion":null,"cvssVector":null,"attackVector":null,"attackComplexity":null,"privilegesRequired":null,"userInteraction":null,"exploitMaturity":"unknown","epssScore":0.00566,"epssCheckedAt":"2026-11-04T12:08:33.171Z","kevDateAdded":null,"advisoryAliases":["GHSA-v359-jj2v-j536"],"affectedPackagesSource":null,"affectedPackagesCheckedAt":null,"patchAvailable":null,"disclosureDate":null,"fixReleasedAt":"2026-03-07T03:54:02.312Z","daysToFix":-2,"fixCheckedAt":"2026-10-29T21:40:01.548Z","capecIds":null,"crossRefCount":0,"attackSophistication":"moderate","impactType":["confidentiality","integrity"],"aiComponentTargeted":"inference","llmSpecific":false,"classifierConfidence":0.9,"researchCategory":null,"atlasIds":null,"fixes":[{"ecosystem":"pypi","name":"vllm","fixedVersion":"0.17.0","matchedVersion":"0.17.0","fixReleasedAt":"2026-03-07T03:54:02.312Z","daysToFix":-2,"match":"ecosystem","source":"tracked","status":"found","checkedAt":"2026-10-29T21:40:01.401Z"}]}}