Skip to content
OpenAdvisories

Vendor

SGLang

18 known vulnerabilities.

Products

SGLang 18
All Critical High Medium Low Exploited only Public exploit

2 results · Clear filters · Feed

  • Medium 5.9
    CVE-2026-94570

    CVE-2026-94570

    SGLang contains a DoS vulnerability caused by missing input validation for AUX_DATA ZeroMQ control messages in the Decode worker, which enables an unauthenticated remote attacker with network reachability to the Decode control PULL socket to terminate the Dec…

    SGLang SGLang
  • Medium 6.5
    CVE-2026-15974

    CVE-2026-15974

    SGLang contains an SSRF and local file read in the multimodal generation endpoint /v1/chat/completions due to unsanitized image_url, allowing access to internal metadata, secrets, and services.

    SGLang SGLang