Skip to content
Threat Feed
Subscribe

CPE

Cpe:2.3:a:sglang:sglang:*:*:*:*:*:*:*:*

2 briefs RSS
high advisory

Unbounded Memory Allocation in SGLang

SGLang versions up to 0.5.21 are vulnerable to a denial-of-service condition via an unbounded memory allocation issue in the /v1/audio/transcriptions endpoint.

SGLang +1 denial-of-service vulnerability code-injection rce
1r 4t updated
medium advisory

Unauthenticated Routing Table Poisoning in SGLang

SGLang versions up to 0.5.19 in disaggregation mode expose an unauthenticated PUT /route endpoint allowing remote attackers to poison KV transfer tables and redirect sensitive data.

SGLang routing-poisoning cve-2026-92972 denial-of-service vulnerability
1r 2t 1c updated