Sglang
23 CVEs tracked. None of them is in CISA KEV.
This hub aggregates every CVE we track for Sglang, a product in the oss libraries space. Use it to gauge the current risk picture and drill into individual advisories.
Sglang CVEs per month
| Month | CVEs |
|---|---|
| 2024-10 | 0 |
| 2024-11 | 0 |
| 2024-12 | 0 |
| 2025-01 | 0 |
| 2025-02 | 0 |
| 2025-03 | 0 |
| 2025-04 | 0 |
| 2025-05 | 0 |
| 2025-06 | 0 |
| 2025-07 | 0 |
| 2025-08 | 0 |
| 2025-09 | 1 |
| 2025-10 | 0 |
| 2025-11 | 0 |
| 2025-12 | 0 |
| 2026-01 | 0 |
| 2026-02 | 0 |
| 2026-03 | 3 |
| 2026-04 | 1 |
| 2026-05 | 4 |
| 2026-06 | 1 |
| 2026-07 | 7 |
| 2026-08 | 0 |
| 2026-09 | 6 |
Severity
How the 23 CVEs score on CVSS. Severity is not exploitation: KEV is counted above.
- Critical12
- High6
- Medium4
- Low1
Latest CVEs
The 15 most recently published vulnerabilities affecting Sglang.
- CVE-2026-94570CVE-2026-945705.9
- CVE-2026-93088CVE-2026-930889.8
- CVE-2026-93838SGLang through 0.5.20 Unbounded Memory Allocation via STAGING_REQ chunk_idx5.9
- CVE-2026-93688SGLang through 0.5.19 Unbounded Memory Allocation via bootstrap_room7.5
- CVE-2026-92972SGLang through 0.5.19 Unauthenticated Route Poisoning via PUT endpoint8.6
- CVE-2026-86793CVE-2026-867939.8
- CVE-2026-15969CVE-2026-159699.8
- CVE-2026-15978CVE-2026-159787.5
- CVE-2026-15977CVE-2026-159777.5
- CVE-2026-15976CVE-2026-159769.8
- CVE-2026-15974CVE-2026-159746.5
- CVE-2026-15971CVE-2026-159719.8
- CVE-2026-14890CVE-2026-148909.1
- CVE-2026-10775sgl-project SGLang Cache data_hash denial of service3.6
- CVE-2026-7304CVE-2026-73049.8
Product grouping is registry-driven, with AI assist and human review. How it works