Product by Sgl-project
SGLang
22 known vulnerabilities in SGLang (Sgl-project), 0 of them actively exploited (CISA KEV).
Key figures
22
Vulnerabilities
0
Actively exploited (KEV)
0
Used by ransomware
1
Critical
Vulnerabilities
Actively exploited vulnerabilities (CISA KEV) first, then by priority. Click a column header to re-sort the table.
| High | CVE-2026-93688 | SGLang through 0.5.19 Unbounded Memory Allocation via bootstrap_room | 7.5 | |
| High | CVE-2026-112082 | Sgl-project SGLang: Improper Resource Shutdown or Release | 7.5 | |
| High | CVE-2026-102634 | SGLang through 0.5.20 Denial of Service via Duplicate bootstrap_room | 7.5 | |
| High | CVE-2026-109226 | SGLang through 0.5.21 Audio Decompression Amplification via load_audio | 7.5 | |
| High | CVE-2026-93838 | SGLang through 0.5.20 Unbounded Memory Allocation via STAGING_REQ chunk_idx | 5.9 | |
| High | CVE-2026-109229 | SGLang through 0.5.21 Decompression Bomb DoS via NanoNemotronVLImageProcessor | 7.5 | |
| High | CVE-2026-109227 | SGLang through 0.5.21 Memory Exhaustion DoS via Qwen-VL Video Preprocessing | 7.5 | |
| Critical | CVE-2026-111391 | SGLang 0.5.10 through 0.5.22 Code Injection via Debug Dumper Filter | 8.1 | |
| High | CVE-2026-109228 | SGLang through 0.5.21 Resource Budget Bypass via GLM-V Video Parameters | 7.5 | |
| High | CVE-2026-92972 | SGLang through 0.5.19 Unauthenticated Route Poisoning via PUT endpoint | 8.6 | |
| High | CVE-2026-109225 | SGLang through 0.5.21 Memory Exhaustion DoS via /v1/audio/transcriptions Upload | 7.5 | |
| High | CVE-2026-112266 | SGLang through 0.5.22 Cross-Request Abort via rid Prefix Matching | 5.9 | |
| High | CVE-2026-112269 | SGLang through 0.5.22 Memory Exhaustion via Unauthenticated Mooncake Decode Registrations | 6.5 | |
| Medium | CVE-2026-112267 | SGLang through 0.5.22 SSRF via bootstrap_host and bootstrap_port on Decode Worker | 6.5 | |
| Medium | CVE-2026-112083 | Sgl-project SGLang: Improper Resource Shutdown or Release | 5.3 | |
| High | CVE-2026-112270 | SGLang through 0.5.22 Memory Exhaustion via Mooncake STAGING_RSP chunk_idx | 6.5 | |
| Medium | CVE-2026-111392 | SGLang through 0.5.21 KV Cache Poisoning via mm_hashes in /generate | 4.8 | |
| Medium | CVE-2026-105245 | sgl-project sglang HTTP Endpoint http_server.py server_info cleartext transmission | 3.7 | |
| Medium | CVE-2026-110807 | sgl-project SGLang generate Endpoint io_struct.py denial of service | 4.3 | |
| Medium | CVE-2026-110809 | sgl-project SGLang Session Cleanup session_controller.py Session.create_req denial of service | 4.3 | |
| Medium | CVE-2026-7669 | sgl-project SGLang HuggingFace Transformer hf_transformers_utils.py get_tokenizer code injection | 5.6 | |
| Medium | CVE-2026-10775 | sgl-project SGLang Cache data_hash denial of service | 3.6 |