Security Advisories
CVEs affecting projects tracked on Release Alert, from NVD & OSV.
CVE-2026-3059
9.8
CRITICALCVSS v3
Severity scale
010
Description
SGLang's multimodal generation module is vulnerable to unauthenticated remote code execution through the ZMQ broker, which deserializes untrusted data using pickle.loads() without authentication.
sgl-project/sglang
GitHubSGLang is a high-performance serving framework for large language models and multimodal models.
GitHubSGLang is a high-performance serving framework for large language models and multimodal models.>= 0.5.5, <= 0.5.9, < 0.5.10NVD
sglangPython Package IndexSGLang is a fast serving framework for large language models and vision language models.
Python Package IndexSGLang is a fast serving framework for large language models and vision language models.>= 0.5.5, <= 0.5.9, < 0.5.10OSV