vLLM: unbounded processor cache lets unauthenticated requests exhaust memory

vLLM caches a processor for every distinct request-controlled mm_processor_kwargs value without limit in MOSS-Audio model serving. An unauthenticated attacker can send many distinct or oversized mel_config values to /tokenize, bypassing --api-key, to exhaust host memory and crash the API process.

Summary written from the sources below. Check the originals before acting.