{"schema_version":1,"title":"Sgl-Project vulnerabilities","summary":"Junglewise Threat Intelligence has tracked 6 vulnerabilities in Sgl-Project: 0 in the last 7 days and 4 in the last 90 days, 0 of them critical and 0 exploited in the wild. The most recent, CVE-2026-112268, was published on 19 October 2026. 3 vulnerabilities in the last four weeks, up 200% on the four before (1). 1 technology has a page of its own.","url":"https://junglewise.ai/threats/vendors/sgl-project","json_url":"https://junglewise.ai/threats/vendors/sgl-project.json","publisher":"Junglewise Threat Intelligence","license":"CC-BY-4.0","license_url":"https://creativecommons.org/licenses/by/4.0/","attribution":"Junglewise Threat Intelligence, https://junglewise.ai/threats/vendors/sgl-project","sources":"NVD, GitHub Security Advisories, OSV, the CISA Known Exploited Vulnerabilities catalog, FIRST EPSS and vendor advisories","kind":"vendor","thin":true,"counts":{"high":2,"all_time":6,"critical":0,"exploited":0,"last_7_days":0,"last_30_days":3,"last_90_days":4,"last_365_days":6},"latest":[{"cve":"CVE-2026-112268","cvss":6.3,"slug":"cve-2026-112268-sglang-router-sgl-model-gateway-through-0-3-2-contains-an","title":"sglang sgl-model-gateway authorization bypass in mesh HA routes","severity":"medium","exploited":false,"published_at":"2026-10-19T14:17:04.32+00:00","url":"https://junglewise.ai/threats/cve-2026-112268-sglang-router-sgl-model-gateway-through-0-3-2-contains-an"},{"cve":"CVE-2026-112083","cvss":5.3,"slug":"cve-2026-112083-a-security-flaw-has-been-discovered-in-sgl-project-sglang-up-to","title":"SGLang weight exporter denial of service via invalid group name","severity":"medium","exploited":false,"published_at":"2026-10-19T06:17:23.377+00:00","url":"https://junglewise.ai/threats/cve-2026-112083-a-security-flaw-has-been-discovered-in-sgl-project-sglang-up-to"},{"cve":"CVE-2026-112082","cvss":7.5,"slug":"cve-2026-112082-a-vulnerability-was-identified-in-sgl-project-sglang-up-to-0-5","title":"SGLang denial of service in expert distribution endpoint","severity":"high","exploited":false,"published_at":"2026-10-19T06:17:23.013+00:00","url":"https://junglewise.ai/threats/cve-2026-112082-a-vulnerability-was-identified-in-sgl-project-sglang-up-to-0-5"},{"cve":"CVE-2026-102634","cvss":7.5,"slug":"cve-2026-102634-sglang-through-0-5-20-in-prefill-decode-disaggregation-mode","title":"SGLang prefill/decode disaggregation DoS in /generate with Mooncake backend","severity":"high","exploited":false,"published_at":"2026-09-29T17:17:07.147+00:00","url":"https://junglewise.ai/threats/cve-2026-102634-sglang-through-0-5-20-in-prefill-decode-disaggregation-mode"},{"cve":"CVE-2026-10775","cvss":3.6,"epss":0.0012,"slug":"cve-2026-10775-sgl-project-sglang-denial-of-service-in-cache-handler","title":"sgl-project SGLang denial of service in Cache Handler","severity":"low","exploited":false,"published_at":"2026-06-03T23:16:17.077+00:00","url":"https://junglewise.ai/threats/cve-2026-10775-sgl-project-sglang-denial-of-service-in-cache-handler"},{"cve":"CVE-2026-10300","cvss":3.7,"epss":0.0037,"slug":"cve-2026-10300-sglang-reachable-assertion-in-lora-manager-scheduler-admission","title":"SGLang reachable assertion in LoRA manager scheduler admission","severity":"low","exploited":false,"published_at":"2026-06-01T23:16:19.17+00:00","url":"https://junglewise.ai/threats/cve-2026-10300-sglang-reachable-assertion-in-lora-manager-scheduler-admission"}],"vendor":{"hub":true,"name":"Sgl-Project","slug":"sgl-project","description":"Programming language and compiler project for structured design.","url":"https://junglewise.ai/threats/vendors/sgl-project"},"weekly":[{"week":"2026-08-17","critical":0,"exploited":0,"vulnerabilities":0},{"week":"2026-08-24","critical":0,"exploited":0,"vulnerabilities":0},{"week":"2026-08-31","critical":0,"exploited":0,"vulnerabilities":0},{"week":"2026-09-07","critical":0,"exploited":0,"vulnerabilities":0},{"week":"2026-09-14","critical":0,"exploited":0,"vulnerabilities":0},{"week":"2026-09-21","critical":0,"exploited":0,"vulnerabilities":0},{"week":"2026-09-28","critical":0,"exploited":0,"vulnerabilities":1},{"week":"2026-10-05","critical":0,"exploited":0,"vulnerabilities":0},{"week":"2026-10-12","critical":0,"exploited":0,"vulnerabilities":0},{"week":"2026-10-19","critical":0,"exploited":0,"vulnerabilities":3},{"week":"2026-10-26","critical":0,"exploited":0,"vulnerabilities":0},{"week":"2026-11-02","critical":0,"exploited":0,"vulnerabilities":0},{"week":"2026-11-09","critical":0,"exploited":0,"vulnerabilities":0}],"most_severe":[{"cve":"CVE-2026-112082","cvss":7.5,"slug":"cve-2026-112082-a-vulnerability-was-identified-in-sgl-project-sglang-up-to-0-5","title":"SGLang denial of service in expert distribution endpoint","severity":"high","exploited":false,"published_at":"2026-10-19T06:17:23.013+00:00","url":"https://junglewise.ai/threats/cve-2026-112082-a-vulnerability-was-identified-in-sgl-project-sglang-up-to-0-5"},{"cve":"CVE-2026-102634","cvss":7.5,"slug":"cve-2026-102634-sglang-through-0-5-20-in-prefill-decode-disaggregation-mode","title":"SGLang prefill/decode disaggregation DoS in /generate with Mooncake backend","severity":"high","exploited":false,"published_at":"2026-09-29T17:17:07.147+00:00","url":"https://junglewise.ai/threats/cve-2026-102634-sglang-through-0-5-20-in-prefill-decode-disaggregation-mode"},{"cve":"CVE-2026-112268","cvss":6.3,"slug":"cve-2026-112268-sglang-router-sgl-model-gateway-through-0-3-2-contains-an","title":"sglang sgl-model-gateway authorization bypass in mesh HA routes","severity":"medium","exploited":false,"published_at":"2026-10-19T14:17:04.32+00:00","url":"https://junglewise.ai/threats/cve-2026-112268-sglang-router-sgl-model-gateway-through-0-3-2-contains-an"},{"cve":"CVE-2026-112083","cvss":5.3,"slug":"cve-2026-112083-a-security-flaw-has-been-discovered-in-sgl-project-sglang-up-to","title":"SGLang weight exporter denial of service via invalid group name","severity":"medium","exploited":false,"published_at":"2026-10-19T06:17:23.377+00:00","url":"https://junglewise.ai/threats/cve-2026-112083-a-security-flaw-has-been-discovered-in-sgl-project-sglang-up-to"},{"cve":"CVE-2026-10300","cvss":3.7,"epss":0.0037,"slug":"cve-2026-10300-sglang-reachable-assertion-in-lora-manager-scheduler-admission","title":"SGLang reachable assertion in LoRA manager scheduler admission","severity":"low","exploited":false,"published_at":"2026-06-01T23:16:19.17+00:00","url":"https://junglewise.ai/threats/cve-2026-10300-sglang-reachable-assertion-in-lora-manager-scheduler-admission"},{"cve":"CVE-2026-10775","cvss":3.6,"epss":0.0012,"slug":"cve-2026-10775-sgl-project-sglang-denial-of-service-in-cache-handler","title":"sgl-project SGLang denial of service in Cache Handler","severity":"low","exploited":false,"published_at":"2026-06-03T23:16:17.077+00:00","url":"https://junglewise.ai/threats/cve-2026-10775-sgl-project-sglang-denial-of-service-in-cache-handler"}],"generated_at":"2026-11-09T03:07:00.176479+00:00","technologies":[{"name":"Sgl-Project SGLang","slug":"sgl-project-sglang","vulnerabilities":3,"url":"https://junglewise.ai/threats/technologies/sgl-project-sglang"}]}