Advisoriesby Ibis
SGLang security advisories
10 advisories · 6 critical or high in 12 months · latest Jun 4
10 advisories
SGLang is Vulnerable to DoS via the data_hash FunctionCVE-2026-10775no fix yetSGLang: Reachable Assertion via lora_path in LoRAManager enables remote Denial of DerviceCVE-2026-10300no fix yetSGLang: Unauthenticated RCE via --enable-custom-logit-processorCVE-2026-7304no fix yetSGLanG: Multimodal scheduler deserializes untrusted pickle data on 0.0.0.0 ROUTER socketCVE-2026-7301no fix yetSGLang's multimodal generation runtime has an unauthenticated path traversal vulnerabilityCVE-2026-7302no fix yetSGLang has an Improper Input Validation/Injection IssueCVE-2026-7669no fix yetSGLang: unsafe deserializationCVE-2026-3989fixed in 0.5.10SGLang: remote code executionCVE-2026-3060fixed in 0.5.10SGLang: remote code executionCVE-2026-3059fixed in 0.5.10SGLang Remote Code Execution Vulnerability via Unsafe Deserialization in update_weights_from_tensorCVE-2025-10164fixed in 0.5.4About SGLang
The fast serving framework for LLMs and vision models.
Packages watched: sglang (PyPI).