Only the latest release is supported with security fixes.

Please report vulnerabilities privately using GitHub's "Report a vulnerability" button on the Security tab of this repository (private vulnerability reporting). Please don't open a public issue for security problems.

I'm a solo maintainer, so please allow a few days for a first response. I'll acknowledge the report, work on a fix, and credit you in the release notes if you'd like.

This repository packages upstream vLLM for Windows. Vulnerabilities in vLLM itself should also be reported to the upstream project.