Skip to content
OpenAdvisories

Product · lm-sys

sglang

1 known vulnerabilities.

1 result · Clear filters · Feed

  • High 7.3

    lmsys sglang update_weights_from_tensor main deserialization

    A security flaw has been discovered in lmsys sglang 0.4.6. Affected by this vulnerability is the function main of the file /update_weights_from_tensor. The manipulation of the argument serialized_named_tensors results in deserialization. The attack can be lau…