PYSEC-2026-4352: Uncontrolled resource consumption vulnerability in vLLM

vLLM versions 0.10.2 before 0.25.0 contain an uncontrolled resource consumption vulnerability. Unauthenticated attackers can submit a pathological decompression-bomb image to /v1/chat/completions, potentially exhausting memory, OOM-killing the worker, and denying service to co-tenants on the same host.