https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-02T19:27:08.995685+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/cve-2026-7304 CVE-2026-7304 — CVE-2026-7304 2026-10-02T19:27:09.029204+00:00

Affected: SGLang

SGLangs multimodal generation runtime is vulnerable to unauthenticated remote code execution when the --enable-custom-logit-processor option is enabled, as Python objects loaded via dill.loads() will be deserialized without validation.

 https://cve.radiocsirt.org/vuln/ghsa-36m8-w8qf-g76p GHSA-36m8-w8qf-g76p — SGLang: Unauthenticated RCE via --enable-custom-logit-processor 2026-10-02T19:27:09.029263+00:00

Affected: PyPI: sglang

SGLang's multimodal generation runtime is vulnerable to unauthenticated remote code execution when the --enable-custom-logit-processor option is enabled, as Python objects loaded via dill.loads() will be deserialized without validation.