Critical
CVE-2026-61732
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 11
Reset filters
Low
CVE-2026-10775
SGLang is Vulnerable to DoS via the data_hash Function
Low
CVE-2026-10300
SGLang: Reachable Assertion via lora_path in LoRAManager enables remote Denial of Dervice
Medium
CVE-2026-7669
SGLang has an Improper Input Validation/Injection Issue
High
CVE-2026-3989
SGLangs `replay_request_dump.py` contains an insecure pickle.load() without validation and proper deserialization
Medium
CVE-2025-10164
SGLang Remote Code Execution Vulnerability via Unsafe Deserialization in update_weights_from_tensor
Critical
CVE-2026-7301
SGLanG: Multimodal scheduler deserializes untrusted pickle data on 0.0.0.0 ROUTER socket
Critical
CVE-2026-7302
SGLang's multimodal generation runtime has an unauthenticated path traversal vulnerability
Critical
CVE-2026-7304
SGLang: Unauthenticated RCE via --enable-custom-logit-processor
Critical
CVE-2026-3059
SGLang's multimodal generation module is vulnerable to unauthenticated remote code execution through the ZMQ broker
Critical
CVE-2026-3060
SGLang's encoder parallel disaggregation system is vulnerable to unauthenticated remote code execution through the disaggregation module
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.