CVE-2025-10164
2 advisories.
PyPI/sglang CVE-2025-10164: high 7.3
SGLang Remote Code Execution Vulnerability via Unsafe Deserialization in update_weights_from_tensor
Action: Upgrade sglang to 0.5.4 or later.
pip install sglang==0.5.4Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | 0.5.4 | - |
Fixed versions
| 0.5.4 |
Sources
- osv: GHSA-9w53-xr52-mwgj
- https://nvd.nist.gov/vuln/detail/CVE-2025-10164
- https://github.com/sgl-project/sglang/commit/49afb3d9d9deedf6dea3a6dd5c50e85e7d8bcb07
- https://github.com/sgl-project/sglang
- https://vuldb.com/?ctiid.323203
- https://vuldb.com/?id.323203
- https://vuldb.com/?submit.635919
CVE-2025-10164 · published · modified · JSON
PyPI/sglang CVE-2025-10164: high 7.3
SGLang Remote Code Execution Vulnerability via Unsafe Deserialization in update_weights_from_tensor
Action: Upgrade sglang to 0.5.4 or later.
pip install sglang==0.5.4Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | 0.5.4 | - |
Fixed versions
| 0.5.4 |
Sources
- osv: PYSEC-2026-1919
- https://nvd.nist.gov/vuln/detail/CVE-2025-10164
- https://github.com/sgl-project/sglang/commit/49afb3d9d9deedf6dea3a6dd5c50e85e7d8bcb07
- https://github.com/sgl-project/sglang
- https://vuldb.com/?ctiid.323203
- https://vuldb.com/?id.323203
- https://vuldb.com/?submit.635919
- https://pypi.org/project/sglang
- https://github.com/advisories/GHSA-9w53-xr52-mwgj
CVE-2025-10164 · published · modified · JSON