All 6 CVE vulnerabilities found in sglang, with AI-generated Chinese analysis, references, and POCs.
Vendor: lmsys
| CVE ID | Title | CVSS | Severity | Published |
|---|---|---|---|---|
| CVE-2026-7669 | sgl-project SGLang HuggingFace Transformer hf_transformers_utils.py get_tokenizer code injection CWE-94 | 5.6 | Medium | 2026-05-02 |
| CVE-2026-5760 | CVE-2026-5760 | 9.8AI | CriticalAI | 2026-04-20 |
| CVE-2026-3989 | CVE-2026-3989 | 8.8AI | HighAI | 2026-03-12 |
| CVE-2026-3060 | CVE-2026-3060 | 9.8AI | CriticalAI | 2026-03-12 |
| CVE-2026-3059 | CVE-2026-3059 | 9.8AI | CriticalAI | 2026-03-12 |
| CVE-2025-10164 | lmsys sglang update_weights_from_tensor main deserialization CWE-502 | 7.3 | High | 2025-09-09 |
All 6 known CVE vulnerabilities affecting sglang with full Chinese analysis, references, and POCs where available.