vllm-project vLLM Penalty utils.py get_token_bin_counts_and_mask denial of service

These records connect through source-stated identifiers. Shared identifiers or dates alone do not establish shared exposure, root cause or applicability.

CVE-2026-105922 · Microsoft / collected KEV context

cve-program · CVE-2026-105922

• https://vuldb.com/vuln/413896
• https://vuldb.com/vuln/413896/cti
• https://vuldb.com/cve/CVE-2026-105922
• https://vuldb.com/submit/992707
• https://github.com/vllm-project/vllm/issues/57719
• https://gist.github.com/Yunzez/5c70a3bb328eaf6d646b9d31e879dc4a#file-repro_prompt_embeds_penalties_engine_crash-py
• https://github.com/vllm-project/vllm/

No related operational record is retained in the current change model.