# sglang (PyPI) vulnerabilities 10 known vulnerabilities (5 critical, 1 high, 3 medium, 1 low), with the versions each affects and the releases that fix them. ## At a glance - Latest release: 0.5.23 (Oct 30, 2026): no advisory affects it - Newest unaffected release: 0.5.23 (Oct 30, 2026), the latest release - Weekly downloads: 336.7K - Dependents: 4 - Releases: 160 since 0.1.3 (Jan 16, 2024) - Registry: https://pypi.org/project/sglang/ - Releases read: Nov 8, 2026 ## Version timeline Affected versions per advisory, in version order: - CVE-2026-10775: 0.1.3 to 0.5.11 (0.5.12 is outside it) - CVE-2026-10300: 0.1.3 to 0.5.10.post1 (0.5.11 is outside it) - CVE-2026-7304: 0.4.1.post7 to 0.5.12 (0.5.12.post1 is outside it) - CVE-2026-7302: 0.5.5 to 0.5.12 (0.5.12.post1 is outside it) - CVE-2026-7301: 0.5.5 to 0.5.12 (0.5.12.post1 is outside it) - CVE-2026-7669: 0.1.3 to 0.5.9 (0.5.10rc0 is outside it) - CVE-2026-3989: 0.1.3 to 0.5.10rc0 (0.5.10 is outside it) - CVE-2026-3060: 0.1.3 to 0.5.10rc0 (0.5.10 is outside it) - CVE-2026-3059: 0.1.3 to 0.5.10rc0 (0.5.10 is outside it) - CVE-2025-10164: 0.1.3 to 0.5.3.post3 (0.5.4 is outside it) ## Advisories (10) ### [CVE-2026-10775](https://cve.now/CVE-2026-10775): sgl-project SGLang Cache data\_hash denial of service - Severity: Low 2.0 - Published: Jun 3, 2026 - Affected: through 0.5.11. - Fixed in 0.5.12 (released May 16, 2026, 18 days before disclosure), the first release outside every affected range (no listed fixed version clears them all). - The latest release, 0.5.23, is not affected. ### [CVE-2026-10300](https://cve.now/CVE-2026-10300): SGLang Inference HTTP Endpoint lora\_manager.py assertion - Severity: Medium 6.3 - Published: Jun 1, 2026 - Affected: through 0.5.10.post1. - Fixed in 0.5.11 (released May 7, 2026, 25 days before disclosure), the first release outside every affected range (no listed fixed version clears them all). - The latest release, 0.5.23, is not affected. ### [CVE-2026-7304](https://cve.now/CVE-2026-7304): CVE-2026-7304 - Severity: Critical 9.8 - Published: May 18, 2026 - Affected: from 0.4.1.post7, through 0.5.12. - Fixed in 0.5.12.post1 (released May 23, 2026, 5 days after disclosure), the first release outside every affected range (no listed fixed version clears them all). - The latest release, 0.5.23, is not affected. ### [CVE-2026-7302](https://cve.now/CVE-2026-7302): CVE-2026-7302 - Severity: Critical 9.1 - Published: May 18, 2026 - Affected: from 0.5.5, through 0.5.12. - Fixed in 0.5.12.post1 (released May 23, 2026, 5 days after disclosure), the first release outside every affected range (no listed fixed version clears them all). - The latest release, 0.5.23, is not affected. ### [CVE-2026-7301](https://cve.now/CVE-2026-7301): CVE-2026-7301 - Severity: Critical 9.8 - Published: May 18, 2026 - Affected: from 0.5.5, through 0.5.12. - Fixed in 0.5.12.post1 (released May 23, 2026, 5 days after disclosure), the first release outside every affected range (no listed fixed version clears them all). - The latest release, 0.5.23, is not affected. ### [CVE-2026-7669](https://cve.now/CVE-2026-7669): sgl-project SGLang HuggingFace Transformer hf\_transformers\_utils.py get\_tokenizer code injection - Severity: Medium 6.3 - Published: May 2, 2026 - Affected: through 0.5.9. - Fixed in 0.5.10 (released Apr 5, 2026, 27 days before disclosure), the first release outside every affected range (no listed fixed version clears them all). - The latest release, 0.5.23, is not affected. ### [CVE-2026-3989](https://cve.now/CVE-2026-3989): CVE-2026-3989 - Severity: High 7.8 - Published: Mar 12, 2026 - Affected: fixed in 0.5.10. - Fixed in 0.5.10 (released Apr 5, 2026, 24 days after disclosure). - The latest release, 0.5.23, is not affected. ### [CVE-2026-3060](https://cve.now/CVE-2026-3060): CVE-2026-3060 - Severity: Critical 9.8 - Published: Mar 12, 2026 - Affected: fixed in 0.5.10. - Fixed in 0.5.10 (released Apr 5, 2026, 24 days after disclosure). - The latest release, 0.5.23, is not affected. ### [CVE-2026-3059](https://cve.now/CVE-2026-3059): CVE-2026-3059 - Severity: Critical 9.8 - Published: Mar 12, 2026 - Affected: fixed in 0.5.10. - Fixed in 0.5.10 (released Apr 5, 2026, 24 days after disclosure). - The latest release, 0.5.23, is not affected. ### [CVE-2025-10164](https://cve.now/CVE-2025-10164): lmsys sglang update\_weights\_from\_tensor main deserialization - Severity: Medium 6.9 - Published: Sep 9, 2025 - Affected: fixed in 0.5.4. - Fixed in 0.5.4 (released Oct 24, 2025, 45 days after disclosure). - The latest release, 0.5.23, is not affected. --- Source: cve.now Built by [Sazabi](https://www.sazabi.com/?utm_source=cve-now&utm_medium=markdown), AI-native observability and security: automatic issue detection, plain-language log search and live dashboards. Page: https://cve.now/packages/pypi/sglang Site guide for agents: https://cve.now/llms.txt Uses NVD data; not endorsed by NVD.