Skip to content
OpenAdvisories

Archive

2 May 2026

Vulnerabilities first published on this day (UTC), newest first.

1 result · Clear filters · Feed

  • Medium 5.6
    CVE-2026-7669 Public exploit

    sgl-project SGLang HuggingFace Transformer hf_transformers_utils.py get_tokenizer code injection

    A vulnerability was detected in sgl-project SGLang up to 0.5.9. Impacted is the function get_tokenizer of the file python/sglang/srt/utils/hf_transformers_utils.py of the component HuggingFace Transformer Handler. The manipulation of the argument trust_remote…