Tools AI Risk Radar ai-incident-0247
Incident record
DeepSeek OCR image input could stop a vLLM engine
- Severity
- Medium
- Status
- Patched
- Type
- Infra Vuln
- Target
- vllm-project/vllm
- Actor
- researcher
What happened
A valid image with a particular pixel balance could trigger an invalid encoder result and stop a serving engine using the DeepSeek OCR family.
The report covers DeepSeek-OCR, DeepSeek-OCR-2 and the related Unlimited-OCR implementation. Access depends on the deployment’s API authentication. The maintainer identifies vLLM 0.30.0 as affected and 0.32.0 as patched.
Sources
- Maintainer security advisorygithub.com/vllm-project/vllm/security/advisories/GHSA-gq5q-8…
One record from the AI Risk Radar, maintained by the Security Desk.Data: CSV · JSON ·RSS · CC BY 4.0 with attribution to YFarmX.Tracker updated · 28 October 2026