S
Vendor security profile
sgl-project
Product portfolio, patch evidence and exploitation signals in a single security scorecard
The data is combined from the CVE Program, NVD, CISA KEV and vendor security advisories.
Total CVEs5
Critical0
CISA KEV0
Public exploit3
Patch rate%20
Avg. CVSS8.1
12-month vulnerability rate
0
0
0
0
0
0
0
0
0
0
4
1
CVE KEV
CVE severity distribution
5toplam CVE
High4 (80%)
Medium1 (20%)
Patch and exploitation view
%20
Verified patch
%0
CISA KEV
%60
Public exploit
1Patch available
0Partial
0Workaround
0Vendor: no patch
4Unknown
Latest vulnerabilities
6.3
CVE-2026-105245
sgl-project sglang HTTP Endpoint http_server.py server_info cleartext transmission
S
Patch verifiedEPSS %0
8.7
CVE-2026-102634
SGLang through 0.5.20 Denial of Service via Duplicate bootstrap_room
S
Patch status unknownEPSS %1
8.2
CVE-2026-93838
SGLang through 0.5.20 Unbounded Memory Allocation via STAGING_REQ chunk_idx
S
Patch status unknownEPSS %1
8.7
CVE-2026-93688
SGLang through 0.5.19 Unbounded Memory Allocation via bootstrap_room
S
Patch status unknownEPSS %1
8.8
CVE-2026-92972
SGLang through 0.5.19 Unauthenticated Route Poisoning via PUT endpoint
S
Patch status unknownEPSS %0