{"data":{"id":"db53f23a-bca9-4d7f-bdd5-e405d4c58c12","title":"GHSA-hgg8-fqqc-vfmw: vLLM: incomplete CVE-2026-22778 fix leaks PIL repr addresses via Anthropic router","summary":"The fix for CVE-2026-22778 / GHSA-4r2x-xpjr-7cvv (PRs #31987 and #32319) added `sanitize_message` at four OpenAI router exception sites, but later vLLM response paths still return `str(exc)` unsanitized. Malformed image bytes make PIL raise `UnidentifiedImageError` with a BytesIO object repr containing a heap address, which these paths echo to clients in `main` HEAD (`771e1e48b`, 2026-05-26). The paths listed are `vllm/entrypoints/anthropic/api_router.py` (lines 78 and 124), `vllm/entrypoints/anthropic/serving.py` (line 808), and `vllm/entrypoints/speech_to_text/realtime/connection.py` (lines 75 and 265).","solution":"N/A -- no mitigation discussed in source.","labels":["security"],"sourceUrl":"https://github.com/advisories/GHSA-hgg8-fqqc-vfmw","publishedAt":"2026-06-17T14:04:09.000Z","cveId":"CVE-2026-54236","cweIds":null,"cvssScore":null,"cvssSeverity":"medium","severity":"medium","attackType":["other"],"issueType":"vulnerability","affectedPackages":["vllm@<= 0.23.0"],"affectedPackageNames":["vllm"],"affectedPackageRefs":["pypi:vllm"],"affectedVendors":[],"affectedVendorsRaw":["vLLM","Anthropic API"],"classifierModel":"claude-haiku-5-5","classifierPromptVersion":"v4","summaryPromptVersion":"v2","headline":null,"headlinePromptVersion":null,"cvssVector":null,"attackVector":null,"attackComplexity":null,"privilegesRequired":null,"userInteraction":null,"exploitMaturity":"unknown","epssScore":0.00927,"epssCheckedAt":"2026-11-04T18:09:14.050Z","kevDateAdded":null,"advisoryAliases":["GHSA-hgg8-fqqc-vfmw"],"affectedPackagesSource":null,"affectedPackagesCheckedAt":null,"patchAvailable":null,"disclosureDate":"2026-06-17T14:04:09.000Z","fixReleasedAt":null,"daysToFix":null,"fixCheckedAt":null,"capecIds":null,"crossRefCount":0,"attackSophistication":"moderate","impactType":["confidentiality"],"aiComponentTargeted":"api","llmSpecific":true,"classifierConfidence":0.95,"researchCategory":null,"atlasIds":null,"fixes":[]}}