Vulnerabilidades em sgl-project
23 resultadosAnálise Vexday
O SGL Project apresenta um perfil de risco baixo com apenas 2 vulnerabilidades catalogadas, nenhuma em exploração ativa conhecida e sem achados críticos. Ambas as falhas foram divulgadas recentemente (últimos 90 dias) e concentram-se em fraqueza de tratamento de recursos (CWE-404), sugerindo um componente immaturo que requer monitoramento contínuo.
CVE-2026-93688HIGHSGLang through 0.5.19 Unbounded Memory Allocation via bootstrap_roomEPSS 0.7%CVE-2026-93838HIGHSGLang through 0.5.20 Unbounded Memory Allocation via STAGING_REQ chunk_idxEPSS 0.7%CVE-2026-112082HIGHsgl-project SGLang Expert-Distribution Recording Endpoint expert_distribution.py Scheduler.expert_distribution_handle denial of serviceEPSS 0.6%CVE-2026-102634HIGHSGLang through 0.5.20 Denial of Service via Duplicate bootstrap_roomEPSS 0.6%CVE-2026-109226HIGHSGLang through 0.5.21 Audio Decompression Amplification via load_audioEPSS 0.6%CVE-2026-109229HIGHSGLang through 0.5.21 Decompression Bomb DoS via NanoNemotronVLImageProcessorEPSS 0.5%CVE-2026-109227HIGHSGLang through 0.5.21 Memory Exhaustion DoS via Qwen-VL Video PreprocessingEPSS 0.5%CVE-2026-109228HIGHSGLang through 0.5.21 Resource Budget Bypass via GLM-V Video ParametersEPSS 0.5%CVE-2026-112269HIGHSGLang through 0.5.22 Memory Exhaustion via Unauthenticated Mooncake Decode RegistrationsEPSS 0.5%CVE-2026-92972HIGHSGLang through 0.5.19 Unauthenticated Route Poisoning via PUT endpointEPSS 0.5%CVE-2026-111391CRITICALSGLang 0.5.10 through 0.5.22 Code Injection via Debug Dumper FilterEPSS 0.5%CVE-2026-109225HIGHSGLang through 0.5.21 Memory Exhaustion DoS via /v1/audio/transcriptions UploadEPSS 0.4%CVE-2026-112267MEDIUMSGLang through 0.5.22 SSRF via bootstrap_host and bootstrap_port on Decode WorkerEPSS 0.4%CVE-2026-112266HIGHSGLang through 0.5.22 Cross-Request Abort via rid Prefix MatchingEPSS 0.4%CVE-2026-112083MEDIUMsgl-project SGLang Weight Exporter weight_exporter.py WeightExporter.send_weights_to_remote_instance denial of serviceEPSS 0.4%CVE-2026-7669MEDIUMsgl-project SGLang HuggingFace Transformer hf_transformers_utils.py get_tokenizer code injectionEPSS 0.4%CVE-2026-110807MEDIUMsgl-project SGLang generate Endpoint io_struct.py denial of serviceEPSS 0.3%CVE-2026-110809MEDIUMsgl-project SGLang Session Cleanup session_controller.py Session.create_req denial of serviceEPSS 0.3%CVE-2026-112268MEDIUMsglang-router through 0.3.2 Authorization Bypass via Mesh HA Management RoutesEPSS 0.3%CVE-2026-112270HIGHSGLang through 0.5.22 Memory Exhaustion via Mooncake STAGING_RSP chunk_idxEPSS 0.2%