huzaifas-sidhpurwala/security-commit huggingface dataset:
CVE-2026-40170: ngtcp2: ngtcp2: Denial of service via stack buffer overflow during QUIC handshake
Component: ngtcp2
Severity: Important
CWE: CWE-120 (Buffer Copy without Checking Size of Input ('Classic Buffer Overflow'))
CVSS v3: 7.5 (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H)
Public date: 2026-04-16T21:34:07.610000+00:00

A flaw was found in ngtcp2, a C implementation of the IETF QUIC (Quick UDP Internet Connections) protocol. A remote attacker can exploit a stack buffer overflow vulnerability by sending specially crafted, large transport parameters during the QUIC handshake. This occurs when the qlog callback is enabled and untrusted peer transport parameters are processed, leading to writes beyond a fixed-size buffer. This can result in a denial of service.

Statement: This Important vulnerability affects ngtcp2 when qlog is enabled and processing untrusted QUIC peer transport parameters, leading to a denial of service. In the context of Red Hat support products ngtcp2 is not shipped directly through any RPM package or supported product but is shipped as a bundled dependency by the nodejs packages to provide QUIC support. This feature is considered experimental by the NodeJS upstream and needs to be enabled during NodeJS's compilation time through (`--with-quic` configuration option), with that in mind the versions of NodeJS as shipped with Red Hat Enterprise Linux are not affected by this vulnerability as QUIC support is not enabled in the distributed supported packages. This means although the affected code is present in the package code base itself, it's not compiled when the package is built and therefore is not present in the final binary.

```

For Samba package, this vulnerability strictly affects environments running Red Hat Enterprise Linux (RHEL) 9.8 and newer, as well as RHEL 10.2 and newer. Only these versions ship with Samba 4.23 or above, which introduces native support for the integrated ngtcp2 library to handle SMB over QUIC functionality. Earlier versions of RHEL utilize older iterations of Samba that do not bundle or support ngtcp2 and are therefore unaffected.

```

Affected upstream versions: < 1.22.1
Fixed upstream versions: v1.22.1
Upstream repository: https://github.com/ngtcp2/ngtcp2
Upstream fix commit: 708a7640c1f48fb8ffb540c4b8ea5b4c1dfb8ee5
CVE-2026-40175: axios: Axios: Remote Code Execution via Prototype Pollution escalation
Component: axios
Severity: Important
CWE: CWE-915 (Improperly Controlled Modification of Dynamically-Determined Object Attributes)
CVSS v3: 9 (CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:C/C:H/I:H/A:H)
Public date: 2026-04-10T19:23:52.285000+00:00

A flaw was found in Axios, a promise-based HTTP client. This vulnerability, known as Prototype Pollution, can be exploited through a specific "Gadget" attack chain. This allows an attacker to escalate a Prototype Pollution vulnerability in a third-party dependency, potentially leading to remote code execution or a full cloud compromise, such as bypassing AWS IMDSv2.

Statement: The Axios library, a promise-based HTTP client, is susceptible to an Important prototype pollution vulnerability. This flaw, when combined with specific "Gadget" attack chains in third-party dependencies, can lead to remote code execution or full cloud compromise, including bypassing AWS IMDSv2.
 
With pollution check patch available in Axios gives an advantage, it remains vulnerable due to HTTP Header Sanitation and Server-Side Request Forgery threat.

Red Hat products that incorporate the vulnerable Axios library are affected.

The openshift4/ose-monitoring-plugin-rhel9 container image is not vulnerable to this flaw. The affected component is used as a build-time dependency but it's not shipped in the final product, meaning the flaw is not present thus cannot be exploited in the container deployments.

Regarding openshift4/ose-console for Product stream 4.12 and 4.13, the vulnerable component is present (indirect dependency), but the vulnerability is not exploitable in our case due to the browser runtime, where the required Node.js-specific attack vectors are not available. With this, the impact becomes low.

Affected upstream versions: >= 1.0.0, < 1.15.0, < 0.31.0
Fixed upstream versions: v1.15.0
Upstream repository: https://github.com/axios/axios
Upstream fix commit: 363185461b90b1b78845dc8a99a1f103d9b122a1
CVE-2026-40192: Pillow: Pillow: Denial of Service via decompression bomb in FITS image processing
Component: Pillow
Severity: Important
CWE: CWE-409 (Improper Handling of Highly Compressed Data (Data Amplification))
CVSS v3: 7.5 (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H)
Public date: 2026-04-15T22:53:56.147000+00:00

A flaw was found in Pillow, a Python imaging library. This vulnerability allows a remote attacker to trigger a denial of service (DoS) by providing a specially crafted FITS image file. The library's failure to limit the amount of GZIP-compressed data during decoding can lead to unbounded memory consumption, causing the system to crash or experience severe performance issues.


Affected upstream versions: >= 10.3.0, < 12.2.0
Fixed upstream versions: 12.2.0
Upstream repository: https://github.com/python-pillow/Pillow
Upstream fix commit: 3cb854e8b2bab43f40e342e665f9340d861aa628
CVE-2026-40253: openCryptoki: openCryptoki: Information disclosure and Denial of Service via malformed BER-encoded cryptographic objects
Component: openCryptoki
Severity: Moderate
CWE: CWE-125 (Out-of-bounds Read)
CVSS v3: 6.8 (CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:H)
Public date: 2026-04-16T22:04:44.005000+00:00

A flaw was found in openCryptoki, a PKCS#11 (Cryptographic Token Interface Standard) library. The BER/DER (Basic Encoding Rules/Distinguished Encoding Rules) decoding functions in the shared common library do not properly validate attacker-controlled length fields against actual buffer boundaries. This allows an attacker to supply a malformed BER-encoded cryptographic object, potentially through PKCS#11 operations, token loading, or remote backend communication. This can lead to out-of-bounds reads and integer underflows, resulting in information disclosure and a denial of service.


Affected upstream versions: <= 3.26.0
Fixed upstream versions: v3.27.0
Upstream repository: https://github.com/opencryptoki/opencryptoki
Upstream fix commit: ed378f463ef73364c89feb0fc923f4dc867332a3
CVE-2026-40355: krb5: MIT Kerberos 5: Denial of Service via NULL pointer dereference in NegoEx mechanism
Component: krb5
Severity: Moderate
CWE: CWE-476 (NULL Pointer Dereference)
CVSS v3: 5.9 (CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H)
Public date: 2026-04-28T00:00:00+00:00

A flaw was found in MIT Kerberos 5 (krb5). An unauthenticated remote attacker can exploit a NULL pointer dereference vulnerability by calling `gss_accept_sec_context()` on a system with a NegoEx mechanism registered. This can lead to the termination of the process, resulting in a Denial of Service (DoS).

Statement: Moderate: This flaw allows an unauthenticated remote attacker to cause a Denial of Service in MIT Kerberos 5 by triggering a NULL pointer dereference. Exploitation requires the NegoEx mechanism to be explicitly registered in the system's GSSAPI configuration, which is not a default state in all Red Hat environments.

Affected upstream versions: 1.18 < 1.22.3
Fixed upstream versions: 1.22.3
Upstream repository: https://github.com/krb5/krb5
Upstream fix commit: 2e75f0d9362fb979f5fc92829431a590a130929f
CVE-2026-40356: krb5: MIT Kerberos 5 (krb5): Denial of Service via integer underflow and out-of-bounds read
Component: krb5
Severity: Moderate
CWE: CWE-191 (Integer Underflow (Wrap or Wraparound))
CVSS v3: 5.9 (CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H)
Public date: 2026-04-28T00:00:00+00:00

A flaw was found in MIT Kerberos 5 (krb5). An unauthenticated remote attacker can exploit an integer underflow and an out-of-bounds read vulnerability by calling `gss_accept_sec_context()` on a system with a NegoEx mechanism registered. This can lead to the process terminating, resulting in a Denial of Service (DoS).

Statement: This Moderate impact denial of service flaw in MIT Kerberos 5 (krb5) allows an unauthenticated remote attacker to trigger an integer underflow and out-of-bounds read. This vulnerability, which can lead to process termination, specifically affects systems where the NegoEx mechanism is registered and `gss_accept_sec_context()` is called. While Kerberos is a fundamental service, the prerequisite of a registered NegoEx mechanism limits the attack surface.

Affected upstream versions: 1.18 < 1.22.3
Fixed upstream versions: 1.22.3
Upstream repository: https://github.com/krb5/krb5
Upstream fix commit: 2e75f0d9362fb979f5fc92829431a590a130929f
CVE-2026-40385: libexif: libexif: Information disclosure and crashes via integer overflow in Nikon MakerNote handling
Component: libexif
Severity: Moderate
CWE: CWE-190 (Integer Overflow or Wraparound)
CVSS v3: 4 (CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:L)
Public date: 2026-04-12T18:16:30.420000+00:00

A flaw was found in libexif. A local attacker on a 32-bit system could exploit an unsigned 32-bit integer overflow vulnerability in the Nikon MakerNote handling. This could lead to application crashes or the disclosure of sensitive information.

Statement: This Moderate impact vulnerability in libexif affects 32-bit systems. A local attacker could trigger an integer overflow in the Nikon MakerNote handling, potentially leading to application crashes or information disclosure.

Affected upstream versions: <= libexif-0_6_25-release
Fixed upstream versions: v0.6.26
Upstream repository: https://github.com/libexif/libexif
Upstream fix commit: 93003b93e50b3d259bd2227d8775b73a53c35d58
CVE-2026-40386: libexif: libexif: Denial of Service and information disclosure via integer underflow in MakerNote decoding
Component: libexif
Severity: Moderate
CWE: CWE-191 (Integer Underflow (Wrap or Wraparound))
CVSS v3: 4 (CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:L)
Public date: 2026-04-12T18:19:08.684000+00:00

A flaw was found in libexif. An integer underflow vulnerability in the size checking mechanism for Fuji and Olympus MakerNote decoding could allow attackers to exploit programs using libexif. This could lead to a Denial of Service (DoS) by crashing the program or result in information disclosure, potentially exposing sensitive data.

Statement: Moderate impact. An integer underflow in libexif's Fuji and Olympus MakerNote decoding could allow an attacker to cause a denial of service or information disclosure. This vulnerability affects programs that process specially crafted image files utilizing libexif.

Affected upstream versions: <= libexif-0_6_25-release
Fixed upstream versions: v0.6.26
Upstream repository: https://github.com/libexif/libexif
Upstream fix commit: dc6eac6e9655d14d0779d99e82d0f5f442d2f34b
CVE-2026-40469: gawk: gawk: Denial of Service due to integer overflow
Component: gawk
Severity: Moderate
CWE: CWE-190 (Integer Overflow or Wraparound)
CVSS v3: 2.8 (CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:N/I:N/A:L)
Public date: 2026-07-13T12:07:55.692000+00:00

A flaw was found in gawk. An integer overflow vulnerability exists in the `do_sub()` routine, which could allow an attacker to overwrite internal program data. This can lead to a denial of service (DoS) by causing the gawk program to crash. This issue affects 32-bit builds of gawk.

Statement: This vulnerability is only present in 32-bit builds of gawk, which are not provided for Red Hat Enterprise Linux versions 7 and later.

Upstream repository: https://cgit.git.savannah.gnu.org/cgit/gawk.git
Upstream fix commit: ae1b2d508f46913269a9e62aceda3636afe8147b
CVE-2026-40890: github.com/gomarkdown/markdown: github.com/gomarkdown/markdown: Denial of Service via malformed Markdown input
Component: github.com/gomarkdown/markdown
Severity: Moderate
CWE: CWE-1286 (Improper Validation of Syntactic Correctness of Input)
CVSS v3: 7.5 (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H)
Public date: 2026-04-21T19:51:53.237000+00:00

A flaw was found in github.com/gomarkdown/markdown, a Go library for parsing Markdown text and rendering as HTML. A remote attacker could exploit this vulnerability by providing a specially crafted malformed input. Specifically, input containing a '<' character not followed by a '>' character, when processed by the SmartypantsRenderer, can lead to an out-of-bounds read or a panic. This can result in a denial of service (DoS) for the application, making it unavailable to legitimate users.

Statement: This is an Important denial of service flaw affecting Red Hat products that utilize the `github.com/gomarkdown/markdown` library. The vulnerability occurs when the `SmartypantsRenderer` processes specially crafted malformed Markdown input containing an unclosed '<' character, leading to an out-of-bounds read or application panic. A successful exploitation may lead the application using the library unavailable.

Affected upstream versions: < 759bbc3e32073c3bc4e25969c132fc520eda2778
Upstream repository: https://github.com/gomarkdown/markdown
Upstream fix commit: 759bbc3e32073c3bc4e25969c132fc520eda2778
CVE-2026-41142: OpenEXR: OpenEXR: Arbitrary code execution via integer overflow in image resizing
Component: OpenEXR
Severity: Important
CWE: CWE-190 (Integer Overflow or Wraparound)
CVSS v3: 8.8 (CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H)
Public date: 2026-05-07T03:58:09.483000+00:00

A flaw was found in OpenEXR, an image storage format library for the motion picture industry. An integer overflow vulnerability exists in the ImageChannel::resize function, which can be triggered when processing a specially crafted OpenEXR image file through the OpenEXRUtil public API. This can lead to a heap out-of-bounds write, potentially allowing a remote attacker to achieve arbitrary code execution, disclose sensitive information, or cause a denial of service.

Statement: This is an Important vulnerability in OpenEXR, which could lead to arbitrary code execution, sensitive information disclosure, or denial of service. The flaw, an integer overflow in the `ImageChannel::resize` function, is triggered when an application processes a specially crafted OpenEXR image file. Successful exploitation requires user interaction, such as opening a malicious file.

Affected upstream versions: >= 3.0.0, < 3.2.9, >= 3.3.0, < 3.3.11, >= 3.4.0, < 3.4.11
Upstream repository: https://github.com/AcademySoftwareFoundation/openexr
Upstream fix commit: 0592ee539f33c122c90f09238579b902d838afb4
CVE-2026-41240: DOMPurify: DOMPurify: Cross-Site Scripting (XSS) via inconsistent tag sanitization
Component: DOMPurify
Severity: Moderate
CWE: CWE-79 (Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting'))
CVSS v3: 8.1 (CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:N)
Public date: 2026-04-23T14:54:32.426000+00:00

A flaw was found in DOMPurify, a DOM-only cross-site scripting sanitizer. A remote attacker could exploit an inconsistency in how forbidden tags and attributes are handled when function-based tag additions are used. This allows malicious HTML, MathML, or SVG elements to bypass sanitization and execute arbitrary code in the user's browser, leading to Cross-Site Scripting (XSS).


Affected upstream versions: < 3.4.0
Fixed upstream versions: 3.3.3
Upstream repository: https://github.com/cure53/DOMPurify
Upstream fix commit: c361baa18dbdcb3344a41110f4c48ad85bf48f80
CVE-2026-41242: protobufjs: protobufjs: Arbitrary code execution via injected protobuf definition type fields
Component: protobufjs
Severity: Important
CWE: CWE-94 (Improper Control of Generation of Code ('Code Injection'))
CVSS v3: 8.8 (CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H)
Public date: 2026-04-18T16:18:10.652000+00:00

A flaw was found in protobufjs, a JavaScript (JS) library used for compiling protobuf definitions. A remote attacker with low privileges can exploit this vulnerability by injecting arbitrary code into the "type" fields of protobuf definitions. This malicious code will then execute during the object decoding process, leading to arbitrary code execution and potentially full system compromise.


Affected upstream versions: < 7.5.5, >= 8.0.0-experimental, < 8.0.1
Fixed upstream versions: protobufjs-cli-v2.0.1
Upstream repository: https://github.com/protobufjs/protobuf.js
Upstream fix commit: 535df444ac060243722ac5d672db205e5c531d75
CVE-2026-41254: Little CMS: lcms2: mm2/Little-CMS: Little CMS: Information disclosure or denial of service via integer overflow in CubeSize
Component: Little CMS
Severity: Moderate
CWE: CWE-190 (Integer Overflow or Wraparound)
CVSS v3: 6.1 (CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:H)
Public date: 2026-04-18T06:43:13.741000+00:00

A flaw was found in Little CMS. An integer overflow in the `CubeSize` function within `cmslut.c` occurs because the overflow check is performed after the multiplication. An attacker could exploit this vulnerability by providing a specially crafted input, potentially leading to information disclosure or a denial of service (DoS), which makes the system unavailable to legitimate users.

Statement: This Moderate flaw in Little CMS (lcms2) involves an integer overflow within the `CubeSize` function, occurring due to an insufficient check during multiplication. Processing specially crafted color profiles or image data could lead to information disclosure or a denial of service, affecting the availability of applications that rely on lcms2 for color management. Exploitation requires user interaction with malicious content.

Affected upstream versions: <= lcms2.18
Fixed upstream versions: lcms2.19
Upstream repository: https://github.com/mm2/Little-CMS
Upstream fix commit: da6110b1d14abc394633a388209abd5ebedd7ab0
CVE-2026-41326: kata-containers: Arbitrary file write inside guest image via CopyFile policy
Component: kata-containers
Severity: Important
CWE: CWE-1220 (Insufficient Granularity of Access Control)
CVSS v3: 8.8 (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H)
Public date: 2026-04-22T19:01:25.112000+00:00

A flaw was found in Kata Containers.  An oversight in the CopyFile policy (and perhaps the CopyFile handler) allows untrusted hosts to write to arbitrary locations inside the guest workload image. This can be used to overwrite binaries inside the guest and exfiltrate data from containers; even those running inside CVMs.

Statement: This flaw in the CopyFile policy of Kata Containers allows untrusted hosts to write to arbitrary locations within a guest workload image. This could lead to the overwriting of binaries inside the guest and the exfiltration of data from containers, including those running within Confidential Virtual Machines (CVMs).

Affected upstream versions: >= 3.4.0, < 3.29.0
Fixed upstream versions: 3.29.0
Upstream repository: https://github.com/kata-containers/kata-containers
Upstream fix commit: 1b9e49eb2763aa6ea6a99b276d3ff5e2c7f658f2
CVE-2026-41411: vim: Vim: Command injection allows arbitrary code execution via malicious tag files
Component: vim
Severity: Moderate
CWE: CWE-78 (Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection'))
CVSS v3: 7.3 (CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H)
Public date: 2026-04-24T16:51:39.657000+00:00

A flaw was found in Vim, an open-source command-line text editor. This command injection vulnerability occurs during tag file processing. A local user could craft a malicious tags file containing backtick syntax in the filename field. When Vim resolves a tag from this file, it executes the embedded command via the system shell, leading to arbitrary code execution with the privileges of the running user.


Affected upstream versions: < 9.2.0357
Fixed upstream versions: v9.2.0357
Upstream repository: https://github.com/vim/vim
Upstream fix commit: c78194e41d5a0b05b0ddf383b6679b1503f977fb
CVE-2026-4150: GIMP: GIMP: Arbitrary code execution via specially crafted PSD file
Component: GIMP
Severity: Important
CWE: CWE-190 (Integer Overflow or Wraparound)
CVSS v3: 7.8 (CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H)
Public date: 2026-04-11T00:15:36.377000+00:00

A flaw was found in GIMP. A remote attacker can exploit this vulnerability by enticing a user to open a specially crafted PSD (Photoshop Document) file. This flaw is due to an integer overflow during the parsing of PSD files, which can lead to arbitrary code execution, allowing the attacker to run malicious code on the affected system.


Affected upstream versions: 3.0.8
Upstream repository: https://gitlab.gnome.org/GNOME/gimp
Upstream fix commit: 00afdabdadeb5457fd897878b1e5aebc3780af10
CVE-2026-4151: gimp: GIMP: Remote Code Execution via ANI File Parsing Integer Overflow
Component: gimp
Severity: Important
CWE: CWE-190 (Integer Overflow or Wraparound)
CVSS v3: 7.8 (CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H)
Public date: 2026-04-11T00:15:45.368000+00:00

A flaw was found in GIMP. Remote attackers can exploit this vulnerability by tricking a user into opening a specially crafted ANI (Animated Cursor) file or visiting a malicious web page. This issue stems from an integer overflow during the parsing of ANI files, caused by insufficient validation of user-supplied data before memory allocation. Successful exploitation could allow an attacker to execute arbitrary code on the affected system with the privileges of the current user.

Statement: Important: This flaw in GIMP allows for remote code execution due to an integer overflow when parsing specially crafted ANI (Animated Cursor) files. Exploitation requires user interaction, specifically opening a malicious ANI file or visiting a malicious web page. Red Hat users are affected if they process untrusted ANI files with GIMP.

Affected upstream versions: 3.0.8
Fixed upstream versions: GIMP_3_2_0
Upstream repository: https://gitlab.gnome.org/GNOME/gimp
Upstream fix commit: 09e5459de913172fc51da3bd6b6adc533acd368e
CVE-2026-4152: gimp: GIMP: Remote Code Execution via malicious JP2 file parsing
Component: gimp
Severity: Important
CWE: CWE-131 (Incorrect Calculation of Buffer Size)
CVSS v3: 7.8 (CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H)
Public date: 2026-04-11T00:15:54.200000+00:00

A flaw was found in GIMP. A remote attacker could exploit this by tricking a user into opening a specially crafted JP2 (JPEG 2000) file. This flaw is due to a heap-based buffer overflow during JP2 file parsing, which allows for arbitrary code execution. Successful exploitation enables the attacker to execute code in the context of the current process.

Statement: This is an Important vulnerability in GIMP that could lead to arbitrary code execution. The flaw is a heap-based buffer overflow in the JP2 file parsing component. Exploitation requires user interaction, where a victim must open a specially crafted malicious JP2 file.

Affected upstream versions: 3.0.8
Fixed upstream versions: GIMP_3_2_0
Upstream repository: https://gitlab.gnome.org/GNOME/gimp
Upstream fix commit: f64c9c23ba3c37dc7b875a9fb477c23953b4666e
CVE-2026-41523: vllm: vLLM: Arbitrary code execution via malicious HuggingFace model
Component: vllm
Severity: Important
CWE: CWE-617 (Reachable Assertion)
CVSS v3: 7.5 (CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H)
Public date: 2026-06-22T22:18:14.494000+00:00

A flaw was found in vLLM, an inference and serving engine for large language models (LLMs). An unauthenticated attacker can exploit an assert-based security check during activation function loading. By publishing a malicious HuggingFace model, an attacker can achieve arbitrary code execution on the server when vLLM runs in Python optimized mode.

Statement: Red Hat rates this issue as having Important impact for Red Hat AI Inference Server and Red Hat OpenShift AI vLLM serving images, and Moderate impact for Red Hat Enterprise Linux AI bootc images that bundle vLLM. Exploitation requires loading an untrusted HuggingFace cross-encoder model while the vLLM process runs with Python optimized mode (python -O or PYTHONOPTIMIZE=1). Red Hat AI Inference Server 3.2/3.3 images and other components without the vulnerable pooler activation loader (vLLM < 0.14.0) are not affected.

Affected upstream versions: < 0.22.0
Fixed upstream versions: v0.22.0
Upstream repository: https://github.com/vllm-project/vllm
Upstream fix commit: b3c7ffcab82c2439726f8cb213800f6f38c023d3