https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Fri, 02 Oct 2026 16:29:43 +0000 https://cve.radiocsirt.org/vuln/euvd-2026-373313 EUVD-2026-373313 https://cve.radiocsirt.org/vuln/euvd-2026-373313 https://cve.radiocsirt.org/vuln/fkie_cve-2026-93688 <p>SGLang through 0.5.19 in prefill/decode disaggregation mode with Mooncake KV transfer backend fails to validate bootstrap_room values, allowing unbounded transfer state allocation. Unauthenticated attackers can reach the decode engine&#39;s POST /generate endpoint and submit arbitrary bootstrap_room values to exhaust prefill process memory until out-of-memory termination.</p> <p>SGLang through 0.5.19 in prefill/decode disaggregation mode with Mooncake KV transfer backend fails to validate bootstrap_room values, allowing unbounded transfer state allocation. Unauthenticated attackers can reach the decode engine&#39;s POST /generate endpoint and submit arbitrary bootstrap_room values to exhaust prefill process memory until out-of-memory termination.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2026-93688 https://cve.radiocsirt.org/vuln/ghsa-hpqj-j2xw-q3cx <p>SGLang through 0.5.19 in prefill/decode disaggregation mode with Mooncake KV transfer backend fails to validate bootstrap_room values, allowing unbounded transfer state allocation. Unauthenticated attackers can reach the decode engine&#39;s POST /generate endpoint and submit arbitrary bootstrap_room values to exhaust prefill process memory until out-of-memory termination.</p> <p>SGLang through 0.5.19 in prefill/decode disaggregation mode with Mooncake KV transfer backend fails to validate bootstrap_room values, allowing unbounded transfer state allocation. Unauthenticated attackers can reach the decode engine&#39;s POST /generate endpoint and submit arbitrary bootstrap_room values to exhaust prefill process memory until out-of-memory termination.</p> https://cve.radiocsirt.org/vuln/ghsa-hpqj-j2xw-q3cx https://cve.radiocsirt.org/vuln/opensuse-su-2026:11865-1 <p>python313-sglang-0.5.20-1.1 on GA media</p> <p>python313-sglang-0.5.20-1.1 on GA media</p> https://cve.radiocsirt.org/vuln/opensuse-su-2026:11865-1