Security
فارسی
All products

sglang

PyPI · Package
10 reports
Vulnerability alerts
Follow
ReportProductEcosystemSeverityFix statusLast updated
SGLang is Vulnerable to DoS via the data_hash FunctionCVE-2026-10775 · GHSA-JRCC-J37M-V8FGVersion ranges need review. sglang PyPI Low No fix reported
SGLangs `replay_request_dump.py` contains an insecure pickle.load() without validation and proper deserializationCVE-2026-3989 · GHSA-HVWJ-8W5G-28RGVersion ranges need review. sglang PyPI High Fix reported
SGLang has an Improper Input Validation/Injection IssueCVE-2026-7669 · GHSA-6M5F-673F-5VH7Version ranges need review. sglang PyPI Medium No fix reported
SGLang: Reachable Assertion via  lora_path  in LoRAManager enables remote Denial of DerviceCVE-2026-10300 · GHSA-M2JR-X4GQ-5RMJVersion ranges need review. sglang PyPI Low No fix reported
SGLang's multimodal generation module is vulnerable to unauthenticated remote code execution through the ZMQ brokerCVE-2026-3059 · GHSA-3CP7-C6Q2-94XRVersion ranges need review. sglang PyPI Critical Fix reported
SGLang's encoder parallel disaggregation system is vulnerable to unauthenticated remote code execution through the disaggregation moduleCVE-2026-3060 · GHSA-JX93-G359-86WMVersion ranges need review. sglang PyPI Critical Fix reported
SGLang Remote Code Execution Vulnerability via Unsafe Deserialization in update_weights_from_tensorCVE-2025-10164 · GHSA-9W53-XR52-MWGJVersion ranges need review. sglang PyPI Medium Fix reported
SGLang's multimodal generation runtime has an unauthenticated path traversal vulnerabilityCVE-2026-7302 · GHSA-QWRP-WGHP-94Q2Version ranges need review. sglang PyPI Critical No fix reported
SGLang: Unauthenticated RCE via --enable-custom-logit-processorCVE-2026-7304 · GHSA-36M8-W8QF-G76PVersion ranges need review. sglang PyPI Critical No fix reported
SGLanG: Multimodal scheduler deserializes untrusted pickle data on 0.0.0.0 ROUTER socketCVE-2026-7301 · GHSA-GWV6-PQ6M-P3RQVersion ranges need review. sglang PyPI Critical No fix reported