Starstruk Logo MarkStarstruk

v0.10.1.1

vllm-project/vllmv0.10.1.1Aug 20, 2025by github-actions[bot]

AI Summary

A critical patch release addressing security vulnerabilities and a critical bug in CUTLASS MLA Full CUDAGraph.

Key Highlights

  • Fix CUTLASS MLA Full CUDAGraph
  • Limit HTTP header count and size (Security)
  • Do not use eval() to convert unknown types (Security)

New Features

  • Security fixes
  • Bug fixes for HTTP handling and eval usage

Full Release Notes

This is a critical bugfix and security release:
* Fix CUTLASS MLA Full CUDAGraph (#23200)
* Limit HTTP header count and size (#23267): https://github.com/vllm-project/vllm/security/advisories/GHSA-rxc4-3w6r-4v47

* Do not use eval() to convert unknown types (#23266): https://github.com/vllm-project/vllm/security/advisories/GHSA-79j6-g2m3-jgfw



**Full Changelog**: https://github.com/vllm-project/vllm/compare/v0.10.1...v0.10.1.1