AI and data stack advisories

Severe, 6 weeks1496Projects326

1496 severe, 6 weeks · 326 projects

SGLangGHSA-jrcc-j37m-v8fg

SGLang is Vulnerable to DoS via the data_hash Function

SGLang

CVE-2026-10775 · Published Jun 4, 2026 · updated Aug 19, 2026

Low3.6
No fix yet
GitHub advisory

A vulnerability was determined in sgl-project SGLang up to 0.5.11. Affected by this vulnerability is the function data_hash of the component Cache Handler. This manipulation causes denial of service. The attack is restricted to local execution. A high degree of complexity is needed for the attack. The exploitation appears to be difficult. The exploit has been publicly disclosed and may be utilized. The pull request to fix this issue awaits acceptance.

Affected versions

PackageAffectedFixed in
sglang
PyPI
<= 0.5.11No fix yet
Details and references

More SGLang advisories

All SGLang