Most recent entries from all https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Fri, 02 Oct 2026 23:29:00 +0000 EUVD-2026-319225 https://cve.radiocsirt.org/vuln/euvd-2026-319225 EUVD-2026-319225 https://cve.radiocsirt.org/vuln/euvd-2026-319225 fkie_cve-2026-7304 https://cve.radiocsirt.org/vuln/fkie_cve-2026-7304 <p>SGLangs multimodal generation runtime is vulnerable to unauthenticated remote code execution when the --enable-custom-logit-processor option is enabled, as Python objects loaded via dill.loads() will be deserialized without validation.</p> <p>SGLangs multimodal generation runtime is vulnerable to unauthenticated remote code execution when the --enable-custom-logit-processor option is enabled, as Python objects loaded via dill.loads() will be deserialized without validation.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2026-7304 GHSA-36m8-w8qf-g76p — SGLang: Unauthenticated RCE via --enable-custom-logit-processor https://cve.radiocsirt.org/vuln/ghsa-36m8-w8qf-g76p <p><strong>Affected:</strong> PyPI: sglang</p> <p>SGLang&#39;s multimodal generation runtime is vulnerable to unauthenticated remote code execution when the --enable-custom-logit-processor option is enabled, as Python objects loaded via dill.loads() will be deserialized without validation.</p> <p><strong>Affected:</strong> PyPI: sglang</p> <p>SGLang&#39;s multimodal generation runtime is vulnerable to unauthenticated remote code execution when the --enable-custom-logit-processor option is enabled, as Python objects loaded via dill.loads() will be deserialized without validation.</p> https://cve.radiocsirt.org/vuln/ghsa-36m8-w8qf-g76p PYSEC-2026-535 — SGLang: Unauthenticated RCE via --enable-custom-logit-processor https://cve.radiocsirt.org/vuln/pysec-2026-535 <p><strong>Affected:</strong> PyPI: sglang</p> <p>SGLang&#39;s multimodal generation runtime is vulnerable to unauthenticated remote code execution when the --enable-custom-logit-processor option is enabled, as Python objects loaded via dill.loads() will be deserialized without validation.</p> <p><strong>Affected:</strong> PyPI: sglang</p> <p>SGLang&#39;s multimodal generation runtime is vulnerable to unauthenticated remote code execution when the --enable-custom-logit-processor option is enabled, as Python objects loaded via dill.loads() will be deserialized without validation.</p> https://cve.radiocsirt.org/vuln/pysec-2026-535