rpm package
opensuse/python-sglang&distro=openSUSE Tumbleweed
pkg:rpm/opensuse/python-sglang&distro=openSUSE%20Tumbleweed
Vulnerabilities (7)
| CVE | Sev | CVSS | KEV | Affected versions | Fixed in | Published | Description |
|---|---|---|---|---|---|---|---|
| CVE-2026-105245 | Low | 3.7 | < 0.5.21-2.1 | 0.5.21-2.1 | Oct 5, 2026 | A vulnerability has been found in sgl-project sglang up to 0.5.21. This issue affects the function server_info of the file python/sglang/srt/entrypoints/http_server.py of the component HTTP Endpoint. Such manipulation of the argument api_key leads to cleartext transmission of sen | |
| CVE-2026-102634 | Hig | 7.5 | < 0.5.20-2.1 | 0.5.20-2.1 | Sep 29, 2026 | SGLang through 0.5.20 in prefill/decode disaggregation mode fails to validate duplicate bootstrap_room fields in /generate requests with Mooncake KV transfer backend. Unauthenticated attackers can send concurrent requests with identical bootstrap_room values to crash scheduler pr | |
| CVE-2026-94570 | Med | 5.9 | < 0.5.20-1.1 | 0.5.20-1.1 | Sep 22, 2026 | SGLang contains a DoS vulnerability caused by missing input validation for AUX_DATA ZeroMQ control messages in the Decode worker, which enables an unauthenticated remote attacker with network reachability to the Decode control PULL socket to terminate the Decode control thread an | |
| CVE-2026-93088 | Cri | 9.8 | < 0.5.20-1.1 | 0.5.20-1.1 | Sep 22, 2026 | SGLang's multimodal generation runtime is vulnerable to unauthenticated arbitrary code execution because the disaggregated-diffusion orchestrator's DiffusionServer binds an unauthenticated ZeroMQ ROUTER socket to a network interface and passes the final frame of received multipar | |
| CVE-2026-93838 | Med | 5.9 | < 0.5.20-1.1 | 0.5.20-1.1 | Sep 18, 2026 | SGLang versions through 0.5.20 contain an unbounded memory allocation vulnerability in handle_staging_req() that fails to validate chunk_idx from ZMQ STAGING_REQ frames in prefill/decode disaggregation deployments. Attackers with access to the decode engine's internal ZMQ rank po | |
| CVE-2026-93688 | Hig | 7.5 | < 0.5.20-1.1 | 0.5.20-1.1 | Sep 18, 2026 | SGLang through 0.5.19 in prefill/decode disaggregation mode with Mooncake KV transfer backend fails to validate bootstrap_room values, allowing unbounded transfer state allocation. Unauthenticated attackers can reach the decode engine's POST /generate endpoint and submit arbitrar | |
| CVE-2026-86793 | Cri | 9.8 | < 0.5.20-1.1 | 0.5.20-1.1 | Sep 11, 2026 | SGLang allows unauthenticated pickle deserialization through /update_weights_from_tensor when no auth keys are configured, and the SafeUnpickler policy can be bypassed because builtins.import and builtins.getattr are resolvable, enabling code execution via pickle REDUCE. |
- affected < 0.5.21-2.1fixed 0.5.21-2.1
A vulnerability has been found in sgl-project sglang up to 0.5.21. This issue affects the function server_info of the file python/sglang/srt/entrypoints/http_server.py of the component HTTP Endpoint. Such manipulation of the argument api_key leads to cleartext transmission of sen
- affected < 0.5.20-2.1fixed 0.5.20-2.1
SGLang through 0.5.20 in prefill/decode disaggregation mode fails to validate duplicate bootstrap_room fields in /generate requests with Mooncake KV transfer backend. Unauthenticated attackers can send concurrent requests with identical bootstrap_room values to crash scheduler pr
- affected < 0.5.20-1.1fixed 0.5.20-1.1
SGLang contains a DoS vulnerability caused by missing input validation for AUX_DATA ZeroMQ control messages in the Decode worker, which enables an unauthenticated remote attacker with network reachability to the Decode control PULL socket to terminate the Decode control thread an
- affected < 0.5.20-1.1fixed 0.5.20-1.1
SGLang's multimodal generation runtime is vulnerable to unauthenticated arbitrary code execution because the disaggregated-diffusion orchestrator's DiffusionServer binds an unauthenticated ZeroMQ ROUTER socket to a network interface and passes the final frame of received multipar
- affected < 0.5.20-1.1fixed 0.5.20-1.1
SGLang versions through 0.5.20 contain an unbounded memory allocation vulnerability in handle_staging_req() that fails to validate chunk_idx from ZMQ STAGING_REQ frames in prefill/decode disaggregation deployments. Attackers with access to the decode engine's internal ZMQ rank po
- affected < 0.5.20-1.1fixed 0.5.20-1.1
SGLang through 0.5.19 in prefill/decode disaggregation mode with Mooncake KV transfer backend fails to validate bootstrap_room values, allowing unbounded transfer state allocation. Unauthenticated attackers can reach the decode engine's POST /generate endpoint and submit arbitrar
- affected < 0.5.20-1.1fixed 0.5.20-1.1
SGLang allows unauthenticated pickle deserialization through /update_weights_from_tensor when no auth keys are configured, and the SafeUnpickler policy can be bypassed because builtins.import and builtins.getattr are resolvable, enabling code execution via pickle REDUCE.