Four vLLM advisories in one day, each an unauthenticated request that stalls or bloats the server

What happened

Four denial-of-service advisories published together and fixed in 0.29.0: an unbounded cache_salt parameter that stalls the single scheduler thread, audio decoding that ignores the configured clip-size limit, sampler-subclass attribute shadowing that bypasses decoder-slot and GPU-memory limits, and remote media fetched in full across four ingress paths before size limits apply. CVSS scores run 3.7 to 6.5, and the four CVE records reached NVD on 26 September.

All four are reachable without credentials on exposed endpoints. The remote-media advisory is the widest: any of four ingress paths materialises the whole fetch before checking size.