Description
SGLang contains a credential leakage vulnerability in the /server_info endpoint, which will return API keys and SSL keyfile information when only the --admin-api-key is configured.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| SGLang | SGLang | ≤ v0.5.15 | — |