All 11 CVE vulnerabilities found in SGLang, with AI-generated Chinese analysis, references, and POCs.
Vendor: lmsys
| CVE ID | Title | CVSS | Severity | Published |
|---|---|---|---|---|
| CVE-2026-10775 | sgl-project SGLang Cache data_hash denial of service CWE-404 | 3.6 | Low | 2026-06-03 |
| CVE-2026-10300 | SGLang Inference HTTP Endpoint lora_manager.py assertion CWE-617 | 3.7 | Low | 2026-06-01 |
| CVE-2026-7304 | CVE-2026-7304 | - | - | 2026-05-18 |
| CVE-2026-7302 | CVE-2026-7302 | - | - | 2026-05-18 |
| CVE-2026-7301 | CVE-2026-7301 | - | - | 2026-05-18 |
| CVE-2026-7669 | sgl-project SGLang HuggingFace Transformer hf_transformers_utils.py get_tokenizer code injection CWE-94 | 5.6 | Medium | 2026-05-02 |
| CVE-2026-5760 | CVE-2026-5760 | 9.8AI | CriticalAI | 2026-04-20 |
| CVE-2026-3989 | CVE-2026-3989 | 8.8AI | HighAI | 2026-03-12 |
| CVE-2026-3060 | CVE-2026-3060 | 9.8AI | CriticalAI | 2026-03-12 |
| CVE-2026-3059 | CVE-2026-3059 | 9.8AI | CriticalAI | 2026-03-12 |
| CVE-2025-10164 | lmsys sglang update_weights_from_tensor main deserialization CWE-502 | 7.3 | High | 2025-09-09 |
All 11 known CVE vulnerabilities affecting SGLang with full Chinese analysis, references, and POCs where available.