PyPI/sglang CVE-2026-10300: low 3.7, EPSS 0.37%
SGLang: Reachable Assertion via lora_path in LoRAManager enables remote Denial of Dervice
Action: No fix published. Pin and monitor.
Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | - | 0.5.10.post1 |
Fixed versions
No fixed version in the source.
Sources
- osv: PYSEC-2026-3064
- https://nvd.nist.gov/vuln/detail/CVE-2026-10300
- https://github.com/sgl-project/sglang/issues/23141
- https://github.com/sgl-project/sglang/pull/25078
- https://github.com/sgl-project/sglang
- https://vuldb.com/cve/CVE-2026-10300
- https://vuldb.com/submit/828086
- https://vuldb.com/vuln/367593
- https://vuldb.com/vuln/367593/cti
- https://pypi.org/project/sglang
- https://github.com/advisories/GHSA-m2jr-x4gq-5rmj
CVE-2026-10300 · published · modified · JSON