Security Advisories
CVEs affecting projects tracked on Release Alert, from NVD & OSV.
CVE-2026-3060
9.8
CRITICALCVSS v3
Severity scale
010
Description
SGLang' encoder parallel disaggregation system is vulnerable to unauthenticated remote code execution through the disaggregation module, which deserializes untrusted data using pickle.loads() without authentication.
sgl-project/sglang
GitHubSGLang is a high-performance serving framework for large language models and multimodal models.
GitHubSGLang is a high-performance serving framework for large language models and multimodal models.>= 0.5.5, <= 0.5.9, < 0.5.10NVD
sglangPython Package IndexSGLang is a fast serving framework for large language models and vision language models.
Python Package IndexSGLang is a fast serving framework for large language models and vision language models.>= 0.5.5, <= 0.5.9, < 0.5.10OSV