{ "document": { "category": "csaf_base", "csaf_version": "2.0", "distribution": { "tlp": { "label": "WHITE" } }, "lang": "en", "notes": [ { "category": "legal_disclaimer", "text": "The Netherlands Cyber Security Center (henceforth: NCSC-NL) maintains this portal to enhance access to its information and vulnerabilities. The use of this information is subject to the following terms and conditions:\n\nThe vulnerabilities disclosed in this portal are gathered by NCSC-NL from a variety of open sources, which the user can retrieve from other platforms. NCSC-NL makes every reasonable effort to ensure that the content of this portal is kept up to date, and that it is accurate and complete. Nevertheless, NCSC-NL cannot entirely rule out the possibility of errors, and therefore cannot give any warranty in respect of its completeness, accuracy or real-time keeping up-to-date. NCSC-NL does not control nor guarantee the accuracy, relevance, timeliness or completeness of information obtained from these external sources. The vulnerabilities disclosed in this portal are intended solely for the convenience of professional parties to take appropriate measures to manage the risks posed to the cybersecurity. No rights can be derived from the information provided therein.\n\nNCSC-NL and the Kingdom of the Netherlands assume no legal liability or responsibility for any damage resulting from either the use or inability of use of the vulnerabilities disclosed in this portal. This includes damage resulting from the inaccuracy of incompleteness of the information contained in it.\nThe information on this page is subject to Dutch law. All disputes related to or arising from the use of this portal regarding the disclosure of vulnerabilities will be submitted to the competent court in The Hague. This choice of means also applies to the court in summary proceedings." } ], "publisher": { "category": "coordinator", "contact_details": "cert@ncsc.nl", "name": "National Cyber Security Centre", "namespace": "https://www.ncsc.nl/" }, "title": "CVE-2026-3059", "tracking": { "current_release_date": "2026-03-23T01:33:55.333365Z", "generator": { "date": "2026-02-17T15:00:00Z", "engine": { "name": "V.E.L.M.A", "version": "1.7" } }, "id": "CVE-2026-3059", "initial_release_date": "2026-03-12T12:25:06.525963Z", "revision_history": [ { "date": "2026-03-12T12:25:06.525963Z", "number": "1", "summary": "CVE created.| Source created.| CVE status created. (valid)| Description created for source.| References created (3)." }, { "date": "2026-03-12T12:25:17.927088Z", "number": "2", "summary": "NCSC Score created." }, { "date": "2026-03-12T12:38:44.020973Z", "number": "3", "summary": "Source created.| CVE status created. (valid)| Description created for source.| Products created (1).| References created (3)." }, { "date": "2026-03-12T12:38:48.321051Z", "number": "4", "summary": "NCSC Score updated." }, { "date": "2026-03-12T14:38:53.137345Z", "number": "5", "summary": "CVSS created.| CWES updated (1).| Unknown change." }, { "date": "2026-03-12T14:38:54.828136Z", "number": "6", "summary": "NCSC Score updated." }, { "date": "2026-03-12T14:58:29.607485Z", "number": "7", "summary": "Source created.| CVE status created. (valid)| EPSS created." }, { "date": "2026-03-12T14:58:36.489781Z", "number": "8", "summary": "NCSC Score updated." }, { "date": "2026-03-12T15:26:46.791323Z", "number": "9", "summary": "CVSS created.| CWES updated (1)." }, { "date": "2026-03-12T15:26:54.156789Z", "number": "10", "summary": "NCSC Score updated." }, { "date": "2026-03-12T15:35:25.214136Z", "number": "11", "summary": "NCSC Score updated." }, { "date": "2026-03-12T17:41:15.162126Z", "number": "12", "summary": "Source created.| CVE status created. (valid)| Description created for source.| CVSS created.| References created (5).| CWES updated (1)." }, { "date": "2026-03-14T18:35:34.812213Z", "number": "13", "summary": "Source created.| CVE status created. (valid)| Description created for source.| CVSS created.| Products connected (126).| Product Identifiers created (141).| Products created (16).| References created (4).| CWES updated (1)." }, { "date": "2026-03-17T14:27:14.467137Z", "number": "14", "summary": "Products created (1).| Product Identifiers created (1).| Exploits created (1)." }, { "date": "2026-03-17T14:27:18.250195Z", "number": "15", "summary": "NCSC Score updated." }, { "date": "2026-03-18T15:58:14.329310Z", "number": "16", "summary": "EPSS updated." }, { "date": "2026-03-18T15:58:17.700671Z", "number": "17", "summary": "NCSC Score updated." }, { "date": "2026-03-19T15:30:35.725848Z", "number": "18", "summary": "Source created.| CVE status created. (valid)| Description created for source.| CVSS created.| References created (5).| CWES updated (1)." }, { "date": "2026-03-20T09:34:19.851998Z", "number": "19", "summary": "Source connected.| CVE status created. (valid)| EPSS created." } ], "status": "interim", "version": "19" } }, "product_tree": { "branches": [ { "branches": [ { "branches": [ { "category": "product_version_range", "name": "vers:unknown/0.5.5|<=0.5.9", "product": { "name": "vers:unknown/0.5.5|<=0.5.9", "product_id": "CSAFPID-5810395" } } ], "category": "product_name", "name": "SGLang" } ], "category": "vendor", "name": "SGLang" }, { "branches": [ { "branches": [ { "category": "product_version_range", "name": "vers:unknown/>=0.5.5|<=0.5.9", "product": { "name": "vers:unknown/>=0.5.5|<=0.5.9", "product_id": "CSAFPID-5835906", "product_identification_helper": { "cpe": "cpe:2.3:a:lmsys:sglang:*:*:*:*:*:*:*:*" } } } ], "category": "product_name", "name": "sglang" } ], "category": "vendor", "name": "lmsys" }, { "branches": [ { "branches": [ { "category": "product_version_range", "name": "vers:unknown/0.1.10", "product": { "name": "vers:unknown/0.1.10", "product_id": "CSAFPID-5154324", "product_identification_helper": { "purl": "pkg:pypi/sglang@0.1.10" } } }, { "category": "product_version_range", "name": "vers:unknown/0.1.11", "product": { "name": "vers:unknown/0.1.11", "product_id": "CSAFPID-5154325", "product_identification_helper": { "purl": "pkg:pypi/sglang@0.1.11" } } }, { "category": "product_version_range", "name": "vers:unknown/0.1.12", "product": { "name": "vers:unknown/0.1.12", "product_id": "CSAFPID-5154326", "product_identification_helper": { "purl": "pkg:pypi/sglang@0.1.12" } } }, { "category": "product_version_range", "name": "vers:unknown/0.1.13", "product": { "name": "vers:unknown/0.1.13", "product_id": "CSAFPID-5154327", "product_identification_helper": { "purl": "pkg:pypi/sglang@0.1.13" } } }, { "category": "product_version_range", "name": "vers:unknown/0.1.14", "product": { "name": "vers:unknown/0.1.14", "product_id": "CSAFPID-5154328", "product_identification_helper": { "purl": "pkg:pypi/sglang@0.1.14" } } }, { "category": "product_version_range", "name": "vers:unknown/0.1.15", "product": { "name": "vers:unknown/0.1.15", "product_id": "CSAFPID-5154329", "product_identification_helper": { "purl": "pkg:pypi/sglang@0.1.15" } } }, { "category": "product_version_range", "name": "vers:unknown/0.1.16", "product": { "name": "vers:unknown/0.1.16", "product_id": "CSAFPID-5154330", "product_identification_helper": { "purl": "pkg:pypi/sglang@0.1.16" } } }, { "category": "product_version_range", "name": "vers:unknown/0.1.17", "product": { "name": "vers:unknown/0.1.17", "product_id": "CSAFPID-5154331", "product_identification_helper": { "purl": "pkg:pypi/sglang@0.1.17" } } }, { "category": "product_version_range", "name": "vers:unknown/0.1.18", "product": { "name": "vers:unknown/0.1.18", "product_id": "CSAFPID-5154332", "product_identification_helper": { "purl": "pkg:pypi/sglang@0.1.18" } } }, { "category": "product_version_range", "name": "vers:unknown/0.1.19", "product": { "name": "vers:unknown/0.1.19", "product_id": "CSAFPID-5154333", "product_identification_helper": { "purl": "pkg:pypi/sglang@0.1.19" } } }, { "category": "product_version_range", "name": "vers:unknown/0.1.20", "product": { "name": "vers:unknown/0.1.20", "product_id": "CSAFPID-5154334", "product_identification_helper": { "purl": "pkg:pypi/sglang@0.1.20" } } }, { "category": "product_version_range", "name": "vers:unknown/0.1.21", "product": { "name": "vers:unknown/0.1.21", "product_id": "CSAFPID-5154335", "product_identification_helper": { "purl": "pkg:pypi/sglang@0.1.21" } } }, { "category": "product_version_range", "name": "vers:unknown/0.1.22", "product": { "name": "vers:unknown/0.1.22", "product_id": "CSAFPID-5154336", "product_identification_helper": { "purl": "pkg:pypi/sglang@0.1.22" } } }, { "category": "product_version_range", "name": "vers:unknown/0.1.24", "product": { "name": "vers:unknown/0.1.24", "product_id": "CSAFPID-5154337", "product_identification_helper": { "purl": "pkg:pypi/sglang@0.1.24" } } }, { "category": "product_version_range", "name": "vers:unknown/0.1.25", "product": { "name": "vers:unknown/0.1.25", "product_id": "CSAFPID-5154338", "product_identification_helper": { "purl": "pkg:pypi/sglang@0.1.25" } } }, { "category": "product_version_range", "name": "vers:unknown/0.1.26", "product": { "name": "vers:unknown/0.1.26", "product_id": "CSAFPID-5154339", "product_identification_helper": { "purl": "pkg:pypi/sglang@0.1.26" } } }, { "category": "product_version_range", "name": "vers:unknown/0.1.3", "product": { "name": "vers:unknown/0.1.3", "product_id": "CSAFPID-5154340", "product_identification_helper": { "purl": "pkg:pypi/sglang@0.1.3" } } }, { "category": "product_version_range", "name": "vers:unknown/0.1.4", "product": { "name": "vers:unknown/0.1.4", "product_id": "CSAFPID-5154341", "product_identification_helper": { "purl": "pkg:pypi/sglang@0.1.4" } } }, { "category": "product_version_range", "name": "vers:unknown/0.1.5", "product": { "name": "vers:unknown/0.1.5", "product_id": "CSAFPID-5154342", "product_identification_helper": { "purl": "pkg:pypi/sglang@0.1.5" } } }, { "category": "product_version_range", "name": "vers:unknown/0.1.6", "product": { "name": "vers:unknown/0.1.6", "product_id": "CSAFPID-5154343", "product_identification_helper": { "purl": "pkg:pypi/sglang@0.1.6" } } }, { "category": "product_version_range", "name": "vers:unknown/0.1.7", "product": { "name": "vers:unknown/0.1.7", "product_id": "CSAFPID-5154344", "product_identification_helper": { "purl": "pkg:pypi/sglang@0.1.7" } } }, { "category": "product_version_range", "name": "vers:unknown/0.1.9", "product": { "name": "vers:unknown/0.1.9", "product_id": "CSAFPID-5154345", "product_identification_helper": { "purl": "pkg:pypi/sglang@0.1.9" } } }, { "category": "product_version_range", "name": "vers:unknown/0.2.0", "product": { "name": "vers:unknown/0.2.0", "product_id": "CSAFPID-5154346", "product_identification_helper": { "purl": "pkg:pypi/sglang@0.2.0" } } }, { "category": "product_version_range", "name": "vers:unknown/0.2.1", "product": { "name": "vers:unknown/0.2.1", "product_id": "CSAFPID-5154347", "product_identification_helper": { "purl": "pkg:pypi/sglang@0.2.1" } } }, { "category": "product_version_range", "name": "vers:unknown/0.2.10", "product": { "name": "vers:unknown/0.2.10", "product_id": "CSAFPID-5154348", "product_identification_helper": { "purl": "pkg:pypi/sglang@0.2.10" } } }, { "category": "product_version_range", "name": "vers:unknown/0.2.11", "product": { "name": "vers:unknown/0.2.11", "product_id": "CSAFPID-5154349", "product_identification_helper": { "purl": "pkg:pypi/sglang@0.2.11" } } }, { "category": "product_version_range", "name": "vers:unknown/0.2.12", "product": { "name": "vers:unknown/0.2.12", "product_id": "CSAFPID-5154350", "product_identification_helper": { "purl": "pkg:pypi/sglang@0.2.12" } } }, { "category": "product_version_range", "name": "vers:unknown/0.2.13", "product": { "name": "vers:unknown/0.2.13", "product_id": "CSAFPID-5154351", "product_identification_helper": { "purl": "pkg:pypi/sglang@0.2.13" } } }, { "category": "product_version_range", "name": "vers:unknown/0.2.14", "product": { "name": "vers:unknown/0.2.14", "product_id": "CSAFPID-5154352", "product_identification_helper": { "purl": "pkg:pypi/sglang@0.2.14" } } }, { "category": "product_version_range", "name": "vers:unknown/0.2.14.post1", "product": { "name": "vers:unknown/0.2.14.post1", "product_id": "CSAFPID-5154353", "product_identification_helper": { "purl": "pkg:pypi/sglang@0.2.14.post1" } } }, { "category": "product_version_range", "name": "vers:unknown/0.2.14.post2", "product": { "name": "vers:unknown/0.2.14.post2", "product_id": "CSAFPID-5154354", "product_identification_helper": { "purl": "pkg:pypi/sglang@0.2.14.post2" } } }, { "category": "product_version_range", "name": "vers:unknown/0.2.15", "product": { "name": "vers:unknown/0.2.15", "product_id": "CSAFPID-5154355", "product_identification_helper": { "purl": "pkg:pypi/sglang@0.2.15" } } }, { "category": "product_version_range", "name": "vers:unknown/0.2.2", "product": { "name": "vers:unknown/0.2.2", "product_id": "CSAFPID-5154356", "product_identification_helper": { "purl": "pkg:pypi/sglang@0.2.2" } } }, { "category": "product_version_range", "name": "vers:unknown/0.2.3", "product": { "name": "vers:unknown/0.2.3", "product_id": "CSAFPID-5154357", "product_identification_helper": { "purl": "pkg:pypi/sglang@0.2.3" } } }, { "category": "product_version_range", "name": "vers:unknown/0.2.4", "product": { "name": "vers:unknown/0.2.4", "product_id": "CSAFPID-5154358", "product_identification_helper": { "purl": "pkg:pypi/sglang@0.2.4" } } }, { "category": "product_version_range", "name": "vers:unknown/0.2.5", "product": { "name": "vers:unknown/0.2.5", "product_id": "CSAFPID-5154359", "product_identification_helper": { "purl": "pkg:pypi/sglang@0.2.5" } } }, { "category": "product_version_range", "name": "vers:unknown/0.2.6", "product": { "name": "vers:unknown/0.2.6", "product_id": "CSAFPID-5154360", "product_identification_helper": { "purl": "pkg:pypi/sglang@0.2.6" } } }, { "category": "product_version_range", "name": "vers:unknown/0.2.7", "product": { "name": "vers:unknown/0.2.7", "product_id": "CSAFPID-5154361", "product_identification_helper": { "purl": "pkg:pypi/sglang@0.2.7" } } }, { "category": "product_version_range", "name": "vers:unknown/0.2.8", "product": { "name": "vers:unknown/0.2.8", "product_id": "CSAFPID-5154362", "product_identification_helper": { "purl": "pkg:pypi/sglang@0.2.8" } } }, { "category": "product_version_range", "name": "vers:unknown/0.2.9", "product": { "name": "vers:unknown/0.2.9", "product_id": "CSAFPID-5154363", "product_identification_helper": { "purl": "pkg:pypi/sglang@0.2.9" } } }, { "category": "product_version_range", "name": "vers:unknown/0.2.9.post1", "product": { "name": "vers:unknown/0.2.9.post1", "product_id": "CSAFPID-5154364", "product_identification_helper": { "purl": "pkg:pypi/sglang@0.2.9.post1" } } }, { "category": "product_version_range", "name": "vers:unknown/0.3.0", "product": { "name": "vers:unknown/0.3.0", "product_id": "CSAFPID-5154365", "product_identification_helper": { "purl": "pkg:pypi/sglang@0.3.0" } } }, { "category": "product_version_range", "name": "vers:unknown/0.3.1", "product": { "name": "vers:unknown/0.3.1", "product_id": "CSAFPID-5154366", "product_identification_helper": { "purl": "pkg:pypi/sglang@0.3.1" } } }, { "category": "product_version_range", "name": "vers:unknown/0.3.1.post1", "product": { "name": "vers:unknown/0.3.1.post1", "product_id": "CSAFPID-5154367", "product_identification_helper": { "purl": "pkg:pypi/sglang@0.3.1.post1" } } }, { "category": "product_version_range", "name": "vers:unknown/0.3.1.post2", "product": { "name": "vers:unknown/0.3.1.post2", "product_id": "CSAFPID-5154368", "product_identification_helper": { "purl": "pkg:pypi/sglang@0.3.1.post2" } } }, { "category": "product_version_range", "name": "vers:unknown/0.3.1.post3", "product": { "name": "vers:unknown/0.3.1.post3", "product_id": "CSAFPID-5154369", "product_identification_helper": { "purl": "pkg:pypi/sglang@0.3.1.post3" } } }, { "category": "product_version_range", "name": "vers:unknown/0.3.2", "product": { "name": "vers:unknown/0.3.2", "product_id": "CSAFPID-5154370", "product_identification_helper": { "purl": "pkg:pypi/sglang@0.3.2" } } }, { "category": "product_version_range", "name": "vers:unknown/0.3.3", "product": { "name": "vers:unknown/0.3.3", "product_id": "CSAFPID-5154371", "product_identification_helper": { "purl": "pkg:pypi/sglang@0.3.3" } } }, { "category": "product_version_range", "name": "vers:unknown/0.3.3.post1", "product": { "name": "vers:unknown/0.3.3.post1", "product_id": "CSAFPID-5154372", "product_identification_helper": { "purl": "pkg:pypi/sglang@0.3.3.post1" } } }, { "category": "product_version_range", "name": "vers:unknown/0.3.4", "product": { "name": "vers:unknown/0.3.4", "product_id": "CSAFPID-5154373", "product_identification_helper": { "purl": "pkg:pypi/sglang@0.3.4" } } }, { "category": "product_version_range", "name": "vers:unknown/0.3.4.post1", "product": { "name": "vers:unknown/0.3.4.post1", "product_id": "CSAFPID-5154374", "product_identification_helper": { "purl": "pkg:pypi/sglang@0.3.4.post1" } } }, { "category": "product_version_range", "name": "vers:unknown/0.3.4.post2", "product": { "name": "vers:unknown/0.3.4.post2", "product_id": "CSAFPID-5154375", "product_identification_helper": { "purl": "pkg:pypi/sglang@0.3.4.post2" } } }, { "category": "product_version_range", "name": "vers:unknown/0.3.5", "product": { "name": "vers:unknown/0.3.5", "product_id": "CSAFPID-5154376", "product_identification_helper": { "purl": "pkg:pypi/sglang@0.3.5" } } }, { "category": "product_version_range", "name": "vers:unknown/0.3.5.post1", "product": { "name": "vers:unknown/0.3.5.post1", "product_id": "CSAFPID-5154377", "product_identification_helper": { "purl": "pkg:pypi/sglang@0.3.5.post1" } } }, { "category": "product_version_range", "name": "vers:unknown/0.3.5.post2", "product": { "name": "vers:unknown/0.3.5.post2", "product_id": "CSAFPID-5154378", "product_identification_helper": { "purl": "pkg:pypi/sglang@0.3.5.post2" } } }, { "category": "product_version_range", "name": "vers:unknown/0.3.6", "product": { "name": "vers:unknown/0.3.6", "product_id": "CSAFPID-5154379", "product_identification_helper": { "purl": "pkg:pypi/sglang@0.3.6" } } }, { "category": "product_version_range", "name": "vers:unknown/0.3.6.post1", "product": { "name": "vers:unknown/0.3.6.post1", "product_id": "CSAFPID-5154380", "product_identification_helper": { "purl": "pkg:pypi/sglang@0.3.6.post1" } } }, { "category": "product_version_range", "name": "vers:unknown/0.3.6.post2", "product": { "name": "vers:unknown/0.3.6.post2", "product_id": "CSAFPID-5154381", "product_identification_helper": { "purl": "pkg:pypi/sglang@0.3.6.post2" } } }, { "category": "product_version_range", "name": "vers:unknown/0.3.6.post3", "product": { "name": "vers:unknown/0.3.6.post3", "product_id": "CSAFPID-5154382", "product_identification_helper": { "purl": "pkg:pypi/sglang@0.3.6.post3" } } }, { "category": "product_version_range", "name": "vers:unknown/0.4.0", "product": { "name": "vers:unknown/0.4.0", "product_id": "CSAFPID-5154383", "product_identification_helper": { "purl": "pkg:pypi/sglang@0.4.0" } } }, { "category": "product_version_range", "name": "vers:unknown/0.4.0.post1", "product": { "name": "vers:unknown/0.4.0.post1", "product_id": "CSAFPID-5154384", "product_identification_helper": { "purl": "pkg:pypi/sglang@0.4.0.post1" } } }, { "category": "product_version_range", "name": "vers:unknown/0.4.0.post2", "product": { "name": "vers:unknown/0.4.0.post2", "product_id": "CSAFPID-5154385", "product_identification_helper": { "purl": "pkg:pypi/sglang@0.4.0.post2" } } }, { "category": "product_version_range", "name": "vers:unknown/0.4.1", "product": { "name": "vers:unknown/0.4.1", "product_id": "CSAFPID-5154386", "product_identification_helper": { "purl": "pkg:pypi/sglang@0.4.1" } } }, { "category": "product_version_range", "name": "vers:unknown/0.4.1.post1", "product": { "name": "vers:unknown/0.4.1.post1", "product_id": "CSAFPID-5154387", "product_identification_helper": { "purl": "pkg:pypi/sglang@0.4.1.post1" } } }, { "category": "product_version_range", "name": "vers:unknown/0.4.1.post2", "product": { "name": "vers:unknown/0.4.1.post2", "product_id": "CSAFPID-5154388", "product_identification_helper": { "purl": "pkg:pypi/sglang@0.4.1.post2" } } }, { "category": "product_version_range", "name": "vers:unknown/0.4.1.post3", "product": { "name": "vers:unknown/0.4.1.post3", "product_id": "CSAFPID-5154389", "product_identification_helper": { "purl": "pkg:pypi/sglang@0.4.1.post3" } } }, { "category": "product_version_range", "name": "vers:unknown/0.4.1.post4", "product": { "name": "vers:unknown/0.4.1.post4", "product_id": "CSAFPID-5154390", "product_identification_helper": { "purl": "pkg:pypi/sglang@0.4.1.post4" } } }, { "category": "product_version_range", "name": "vers:unknown/0.4.1.post5", "product": { "name": "vers:unknown/0.4.1.post5", "product_id": "CSAFPID-5154391", "product_identification_helper": { "purl": "pkg:pypi/sglang@0.4.1.post5" } } }, { "category": "product_version_range", "name": "vers:unknown/0.4.1.post6", "product": { "name": "vers:unknown/0.4.1.post6", "product_id": "CSAFPID-5154392", "product_identification_helper": { "purl": "pkg:pypi/sglang@0.4.1.post6" } } }, { "category": "product_version_range", "name": "vers:unknown/0.4.1.post7", "product": { "name": "vers:unknown/0.4.1.post7", "product_id": "CSAFPID-5154393", "product_identification_helper": { "purl": "pkg:pypi/sglang@0.4.1.post7" } } }, { "category": "product_version_range", "name": "vers:unknown/0.4.10", "product": { "name": "vers:unknown/0.4.10", "product_id": "CSAFPID-5154394", "product_identification_helper": { "purl": "pkg:pypi/sglang@0.4.10" } } }, { "category": "product_version_range", "name": "vers:unknown/0.4.10.post1", "product": { "name": "vers:unknown/0.4.10.post1", "product_id": "CSAFPID-5154395", "product_identification_helper": { "purl": "pkg:pypi/sglang@0.4.10.post1" } } }, { "category": "product_version_range", "name": "vers:unknown/0.4.10.post2", "product": { "name": "vers:unknown/0.4.10.post2", "product_id": "CSAFPID-5154396", "product_identification_helper": { "purl": "pkg:pypi/sglang@0.4.10.post2" } } }, { "category": "product_version_range", "name": "vers:unknown/0.4.2", "product": { "name": "vers:unknown/0.4.2", "product_id": "CSAFPID-5154397", "product_identification_helper": { "purl": "pkg:pypi/sglang@0.4.2" } } }, { "category": "product_version_range", "name": "vers:unknown/0.4.2.post1", "product": { "name": "vers:unknown/0.4.2.post1", "product_id": "CSAFPID-5154398", "product_identification_helper": { "purl": "pkg:pypi/sglang@0.4.2.post1" } } }, { "category": "product_version_range", "name": "vers:unknown/0.4.2.post2", "product": { "name": "vers:unknown/0.4.2.post2", "product_id": "CSAFPID-5154399", "product_identification_helper": { "purl": "pkg:pypi/sglang@0.4.2.post2" } } }, { "category": "product_version_range", "name": "vers:unknown/0.4.2.post3", "product": { "name": "vers:unknown/0.4.2.post3", "product_id": "CSAFPID-5154400", "product_identification_helper": { "purl": "pkg:pypi/sglang@0.4.2.post3" } } }, { "category": "product_version_range", "name": "vers:unknown/0.4.2.post4", "product": { "name": "vers:unknown/0.4.2.post4", "product_id": "CSAFPID-5154401", "product_identification_helper": { "purl": "pkg:pypi/sglang@0.4.2.post4" } } }, { "category": "product_version_range", "name": "vers:unknown/0.4.3", "product": { "name": "vers:unknown/0.4.3", "product_id": "CSAFPID-5154402", "product_identification_helper": { "purl": "pkg:pypi/sglang@0.4.3" } } }, { "category": "product_version_range", "name": "vers:unknown/0.4.3.post1", "product": { "name": "vers:unknown/0.4.3.post1", "product_id": "CSAFPID-5154403", "product_identification_helper": { "purl": "pkg:pypi/sglang@0.4.3.post1" } } }, { "category": "product_version_range", "name": "vers:unknown/0.4.3.post2", "product": { "name": "vers:unknown/0.4.3.post2", "product_id": "CSAFPID-5154404", "product_identification_helper": { "purl": "pkg:pypi/sglang@0.4.3.post2" } } }, { "category": "product_version_range", "name": "vers:unknown/0.4.3.post3", "product": { "name": "vers:unknown/0.4.3.post3", "product_id": "CSAFPID-5154405", "product_identification_helper": { "purl": "pkg:pypi/sglang@0.4.3.post3" } } }, { "category": "product_version_range", "name": "vers:unknown/0.4.3.post4", "product": { "name": "vers:unknown/0.4.3.post4", "product_id": "CSAFPID-5154406", "product_identification_helper": { "purl": "pkg:pypi/sglang@0.4.3.post4" } } }, { "category": "product_version_range", "name": "vers:unknown/0.4.4", "product": { "name": "vers:unknown/0.4.4", "product_id": "CSAFPID-5154407", "product_identification_helper": { "purl": "pkg:pypi/sglang@0.4.4" } } }, { "category": "product_version_range", "name": "vers:unknown/0.4.4.post1", "product": { "name": "vers:unknown/0.4.4.post1", "product_id": "CSAFPID-5154408", "product_identification_helper": { "purl": "pkg:pypi/sglang@0.4.4.post1" } } }, { "category": "product_version_range", "name": "vers:unknown/0.4.4.post2", "product": { "name": "vers:unknown/0.4.4.post2", "product_id": "CSAFPID-5154409", "product_identification_helper": { "purl": "pkg:pypi/sglang@0.4.4.post2" } } }, { "category": "product_version_range", "name": "vers:unknown/0.4.4.post3", "product": { "name": "vers:unknown/0.4.4.post3", "product_id": "CSAFPID-5154410", "product_identification_helper": { "purl": "pkg:pypi/sglang@0.4.4.post3" } } }, { "category": "product_version_range", "name": "vers:unknown/0.4.4.post4", "product": { "name": "vers:unknown/0.4.4.post4", "product_id": "CSAFPID-5154411", "product_identification_helper": { "purl": "pkg:pypi/sglang@0.4.4.post4" } } }, { "category": "product_version_range", "name": "vers:unknown/0.4.5", "product": { "name": "vers:unknown/0.4.5", "product_id": "CSAFPID-5154412", "product_identification_helper": { "purl": "pkg:pypi/sglang@0.4.5" } } }, { "category": "product_version_range", "name": "vers:unknown/0.4.5.post1", "product": { "name": "vers:unknown/0.4.5.post1", "product_id": "CSAFPID-5154413", "product_identification_helper": { "purl": "pkg:pypi/sglang@0.4.5.post1" } } }, { "category": "product_version_range", "name": "vers:unknown/0.4.5.post2", "product": { "name": "vers:unknown/0.4.5.post2", "product_id": "CSAFPID-5154414", "product_identification_helper": { "purl": "pkg:pypi/sglang@0.4.5.post2" } } }, { "category": "product_version_range", "name": "vers:unknown/0.4.5.post3", "product": { "name": "vers:unknown/0.4.5.post3", "product_id": "CSAFPID-5154415", "product_identification_helper": { "purl": "pkg:pypi/sglang@0.4.5.post3" } } }, { "category": "product_version_range", "name": "vers:unknown/0.4.6", "product": { "name": "vers:unknown/0.4.6", "product_id": "CSAFPID-5154416", "product_identification_helper": { "purl": "pkg:pypi/sglang@0.4.6" } } }, { "category": "product_version_range", "name": "vers:unknown/0.4.6.post1", "product": { "name": "vers:unknown/0.4.6.post1", "product_id": "CSAFPID-5154417", "product_identification_helper": { "purl": "pkg:pypi/sglang@0.4.6.post1" } } }, { "category": "product_version_range", "name": "vers:unknown/0.4.6.post2", "product": { "name": "vers:unknown/0.4.6.post2", "product_id": "CSAFPID-5154418", "product_identification_helper": { "purl": "pkg:pypi/sglang@0.4.6.post2" } } }, { "category": "product_version_range", "name": "vers:unknown/0.4.6.post3", "product": { "name": "vers:unknown/0.4.6.post3", "product_id": "CSAFPID-5154419", "product_identification_helper": { "purl": "pkg:pypi/sglang@0.4.6.post3" } } }, { "category": "product_version_range", "name": "vers:unknown/0.4.6.post4", "product": { "name": "vers:unknown/0.4.6.post4", "product_id": "CSAFPID-5154420", "product_identification_helper": { "purl": "pkg:pypi/sglang@0.4.6.post4" } } }, { "category": "product_version_range", "name": "vers:unknown/0.4.6.post5", "product": { "name": "vers:unknown/0.4.6.post5", "product_id": "CSAFPID-5154421", "product_identification_helper": { "purl": "pkg:pypi/sglang@0.4.6.post5" } } }, { "category": "product_version_range", "name": "vers:unknown/0.4.7", "product": { "name": "vers:unknown/0.4.7", "product_id": "CSAFPID-5154422", "product_identification_helper": { "purl": "pkg:pypi/sglang@0.4.7" } } }, { "category": "product_version_range", "name": "vers:unknown/0.4.7.post1", "product": { "name": "vers:unknown/0.4.7.post1", "product_id": "CSAFPID-5154423", "product_identification_helper": { "purl": "pkg:pypi/sglang@0.4.7.post1" } } }, { "category": "product_version_range", "name": "vers:unknown/0.4.8", "product": { "name": "vers:unknown/0.4.8", "product_id": "CSAFPID-5154424", "product_identification_helper": { "purl": "pkg:pypi/sglang@0.4.8" } } }, { "category": "product_version_range", "name": "vers:unknown/0.4.8.post1", "product": { "name": "vers:unknown/0.4.8.post1", "product_id": "CSAFPID-5154425", "product_identification_helper": { "purl": "pkg:pypi/sglang@0.4.8.post1" } } }, { "category": "product_version_range", "name": "vers:unknown/0.4.9", "product": { "name": "vers:unknown/0.4.9", "product_id": "CSAFPID-5154426", "product_identification_helper": { "purl": "pkg:pypi/sglang@0.4.9" } } }, { "category": "product_version_range", "name": "vers:unknown/0.4.9.post1", "product": { "name": "vers:unknown/0.4.9.post1", "product_id": "CSAFPID-5154427", "product_identification_helper": { "purl": "pkg:pypi/sglang@0.4.9.post1" } } }, { "category": "product_version_range", "name": "vers:unknown/0.4.9.post2", "product": { "name": "vers:unknown/0.4.9.post2", "product_id": "CSAFPID-5154428", "product_identification_helper": { "purl": "pkg:pypi/sglang@0.4.9.post2" } } }, { "category": "product_version_range", "name": "vers:unknown/0.4.9.post3", "product": { "name": "vers:unknown/0.4.9.post3", "product_id": "CSAFPID-5154429", "product_identification_helper": { "purl": "pkg:pypi/sglang@0.4.9.post3" } } }, { "category": "product_version_range", "name": "vers:unknown/0.4.9.post4", "product": { "name": "vers:unknown/0.4.9.post4", "product_id": "CSAFPID-5154430", "product_identification_helper": { "purl": "pkg:pypi/sglang@0.4.9.post4" } } }, { "category": "product_version_range", "name": "vers:unknown/0.4.9.post5", "product": { "name": "vers:unknown/0.4.9.post5", "product_id": "CSAFPID-5154431", "product_identification_helper": { "purl": "pkg:pypi/sglang@0.4.9.post5" } } }, { "category": "product_version_range", "name": "vers:unknown/0.4.9.post6", "product": { "name": "vers:unknown/0.4.9.post6", "product_id": "CSAFPID-5154432", "product_identification_helper": { "purl": "pkg:pypi/sglang@0.4.9.post6" } } }, { "category": "product_version_range", "name": "vers:unknown/0.5.0rc0", "product": { "name": "vers:unknown/0.5.0rc0", "product_id": "CSAFPID-5154433", "product_identification_helper": { "purl": "pkg:pypi/sglang@0.5.0rc0" } } }, { "category": "product_version_range", "name": "vers:unknown/0.5.0rc1", "product": { "name": "vers:unknown/0.5.0rc1", "product_id": "CSAFPID-5154434", "product_identification_helper": { "purl": "pkg:pypi/sglang@0.5.0rc1" } } }, { "category": "product_version_range", "name": "vers:unknown/0.5.0rc2", "product": { "name": "vers:unknown/0.5.0rc2", "product_id": "CSAFPID-5154435", "product_identification_helper": { "purl": "pkg:pypi/sglang@0.5.0rc2" } } }, { "category": "product_version_range", "name": "vers:unknown/0.5.1", "product": { "name": "vers:unknown/0.5.1", "product_id": "CSAFPID-5154436", "product_identification_helper": { "purl": "pkg:pypi/sglang@0.5.1" } } }, { "category": "product_version_range", "name": "vers:unknown/0.5.1.post1", "product": { "name": "vers:unknown/0.5.1.post1", "product_id": "CSAFPID-5154437", "product_identification_helper": { "purl": "pkg:pypi/sglang@0.5.1.post1" } } }, { "category": "product_version_range", "name": "vers:unknown/0.5.1.post2", "product": { "name": "vers:unknown/0.5.1.post2", "product_id": "CSAFPID-5154438", "product_identification_helper": { "purl": "pkg:pypi/sglang@0.5.1.post2" } } }, { "category": "product_version_range", "name": "vers:unknown/0.5.1.post3", "product": { "name": "vers:unknown/0.5.1.post3", "product_id": "CSAFPID-5154439", "product_identification_helper": { "purl": "pkg:pypi/sglang@0.5.1.post3" } } }, { "category": "product_version_range", "name": "vers:unknown/0.5.2", "product": { "name": "vers:unknown/0.5.2", "product_id": "CSAFPID-5154440", "product_identification_helper": { "purl": "pkg:pypi/sglang@0.5.2" } } }, { "category": "product_version_range", "name": "vers:unknown/0.5.2rc0", "product": { "name": "vers:unknown/0.5.2rc0", "product_id": "CSAFPID-5154441", "product_identification_helper": { "purl": "pkg:pypi/sglang@0.5.2rc0" } } }, { "category": "product_version_range", "name": "vers:unknown/0.5.2rc1", "product": { "name": "vers:unknown/0.5.2rc1", "product_id": "CSAFPID-5154442", "product_identification_helper": { "purl": "pkg:pypi/sglang@0.5.2rc1" } } }, { "category": "product_version_range", "name": "vers:unknown/0.5.2rc2", "product": { "name": "vers:unknown/0.5.2rc2", "product_id": "CSAFPID-5154443", "product_identification_helper": { "purl": "pkg:pypi/sglang@0.5.2rc2" } } }, { "category": "product_version_range", "name": "vers:unknown/0.5.3", "product": { "name": "vers:unknown/0.5.3", "product_id": "CSAFPID-5154444", "product_identification_helper": { "purl": "pkg:pypi/sglang@0.5.3" } } }, { "category": "product_version_range", "name": "vers:unknown/0.5.3.post1", "product": { "name": "vers:unknown/0.5.3.post1", "product_id": "CSAFPID-5154445", "product_identification_helper": { "purl": "pkg:pypi/sglang@0.5.3.post1" } } }, { "category": "product_version_range", "name": "vers:unknown/0.5.3.post2", "product": { "name": "vers:unknown/0.5.3.post2", "product_id": "CSAFPID-5154446", "product_identification_helper": { "purl": "pkg:pypi/sglang@0.5.3.post2" } } }, { "category": "product_version_range", "name": "vers:unknown/0.5.3.post3", "product": { "name": "vers:unknown/0.5.3.post3", "product_id": "CSAFPID-5154447", "product_identification_helper": { "purl": "pkg:pypi/sglang@0.5.3.post3" } } }, { "category": "product_version_range", "name": "vers:unknown/0.5.3rc0", "product": { "name": "vers:unknown/0.5.3rc0", "product_id": "CSAFPID-5154448", "product_identification_helper": { "purl": "pkg:pypi/sglang@0.5.3rc0" } } }, { "category": "product_version_range", "name": "vers:unknown/0.5.3rc2", "product": { "name": "vers:unknown/0.5.3rc2", "product_id": "CSAFPID-5154449", "product_identification_helper": { "purl": "pkg:pypi/sglang@0.5.3rc2" } } }, { "category": "product_version_range", "name": "vers:unknown/0.5.4", "product": { "name": "vers:unknown/0.5.4", "product_id": "CSAFPID-5827639", "product_identification_helper": { "purl": "pkg:pypi/sglang@0.5.4" } } }, { "category": "product_version_range", "name": "vers:unknown/0.5.4.post1", "product": { "name": "vers:unknown/0.5.4.post1", "product_id": "CSAFPID-5827640", "product_identification_helper": { "purl": "pkg:pypi/sglang@0.5.4.post1" } } }, { "category": "product_version_range", "name": "vers:unknown/0.5.4.post2", "product": { "name": "vers:unknown/0.5.4.post2", "product_id": "CSAFPID-5827641", "product_identification_helper": { "purl": "pkg:pypi/sglang@0.5.4.post2" } } }, { "category": "product_version_range", "name": "vers:unknown/0.5.4.post3", "product": { "name": "vers:unknown/0.5.4.post3", "product_id": "CSAFPID-5827642", "product_identification_helper": { "purl": "pkg:pypi/sglang@0.5.4.post3" } } }, { "category": "product_version_range", "name": "vers:unknown/0.5.5", "product": { "name": "vers:unknown/0.5.5", "product_id": "CSAFPID-5827643", "product_identification_helper": { "purl": "pkg:pypi/sglang@0.5.5" } } }, { "category": "product_version_range", "name": "vers:unknown/0.5.5.post1", "product": { "name": "vers:unknown/0.5.5.post1", "product_id": "CSAFPID-5827644", "product_identification_helper": { "purl": "pkg:pypi/sglang@0.5.5.post1" } } }, { "category": "product_version_range", "name": "vers:unknown/0.5.5.post2", "product": { "name": "vers:unknown/0.5.5.post2", "product_id": "CSAFPID-5827645", "product_identification_helper": { "purl": "pkg:pypi/sglang@0.5.5.post2" } } }, { "category": "product_version_range", "name": "vers:unknown/0.5.5.post3", "product": { "name": "vers:unknown/0.5.5.post3", "product_id": "CSAFPID-5827646", "product_identification_helper": { "purl": "pkg:pypi/sglang@0.5.5.post3" } } }, { "category": "product_version_range", "name": "vers:unknown/0.5.6", "product": { "name": "vers:unknown/0.5.6", "product_id": "CSAFPID-5827647", "product_identification_helper": { "purl": "pkg:pypi/sglang@0.5.6" } } }, { "category": "product_version_range", "name": "vers:unknown/0.5.6.post1", "product": { "name": "vers:unknown/0.5.6.post1", "product_id": "CSAFPID-5827648", "product_identification_helper": { "purl": "pkg:pypi/sglang@0.5.6.post1" } } }, { "category": "product_version_range", "name": "vers:unknown/0.5.6.post2", "product": { "name": "vers:unknown/0.5.6.post2", "product_id": "CSAFPID-5827649", "product_identification_helper": { "purl": "pkg:pypi/sglang@0.5.6.post2" } } }, { "category": "product_version_range", "name": "vers:unknown/0.5.7", "product": { "name": "vers:unknown/0.5.7", "product_id": "CSAFPID-5827650", "product_identification_helper": { "purl": "pkg:pypi/sglang@0.5.7" } } }, { "category": "product_version_range", "name": "vers:unknown/0.5.8", "product": { "name": "vers:unknown/0.5.8", "product_id": "CSAFPID-5827651", "product_identification_helper": { "purl": "pkg:pypi/sglang@0.5.8" } } }, { "category": "product_version_range", "name": "vers:unknown/0.5.8.post1", "product": { "name": "vers:unknown/0.5.8.post1", "product_id": "CSAFPID-5827652", "product_identification_helper": { "purl": "pkg:pypi/sglang@0.5.8.post1" } } }, { "category": "product_version_range", "name": "vers:unknown/0.5.9", "product": { "name": "vers:unknown/0.5.9", "product_id": "CSAFPID-5827653", "product_identification_helper": { "purl": "pkg:pypi/sglang@0.5.9" } } }, { "category": "product_version_range", "name": "vers:unknown/>=0|<=0.5.9", "product": { "name": "vers:unknown/>=0|<=0.5.9", "product_id": "CSAFPID-5827654" } } ], "category": "product_name", "name": "sglang" } ], "category": "vendor", "name": "sgl-project" } ] }, "vulnerabilities": [ { "cve": "CVE-2026-3059", "cwe": { "id": "CWE-502", "name": "Deserialization of Untrusted Data" }, "notes": [ { "category": "description", "text": "SGLang's multimodal generation module is vulnerable to unauthenticated remote code execution through the ZMQ broker, which deserializes untrusted data using pickle.loads() without authentication.", "title": "nvd - https://nvd.nist.gov/vuln/detail/CVE-2026-3059" }, { "category": "description", "text": "SGLang's multimodal generation module is vulnerable to unauthenticated remote code execution through the ZMQ broker, which deserializes untrusted data using pickle.loads() without authentication.", "title": "cveprojectv5 - https://www.cve.org/CVERecord?id=CVE-2026-3059" }, { "category": "description", "text": "SGLang's multimodal generation module is vulnerable to unauthenticated remote code execution through the ZMQ broker, which deserializes untrusted data using pickle.loads() without authentication.", "title": "github - https://github.com/advisories/GHSA-rgq9-fqf5-fv58" }, { "category": "description", "text": "SGLang's multimodal generation module is vulnerable to unauthenticated remote code execution through the ZMQ broker, which deserializes untrusted data using pickle.loads() without authentication.", "title": "osv - https://www.googleapis.com/download/storage/v1/b/osv-vulnerabilities/o/PyPI%2FGHSA-rgq9-fqf5-fv58.json?alt=media" }, { "category": "description", "text": "SGLang's multimodal generation module is vulnerable to unauthenticated remote code execution through the ZMQ broker, which deserializes untrusted data using pickle.loads() without authentication.", "title": "github - https://api.github.com/advisories/GHSA-rgq9-fqf5-fv58" }, { "category": "other", "text": "0.01172", "title": "EPSS" }, { "category": "other", "text": "3.9", "title": "NCSC Score" }, { "category": "other", "text": "Is related to CWE-502 (Deserialization of Untrusted Data), There is exploit data available from source Nvd", "title": "NCSC Score top decreasing factors" } ], "product_status": { "known_affected": [ "CSAFPID-5810395", "CSAFPID-5154324", "CSAFPID-5154325", "CSAFPID-5154326", "CSAFPID-5154327", "CSAFPID-5154328", "CSAFPID-5154329", "CSAFPID-5154330", "CSAFPID-5154331", "CSAFPID-5154332", "CSAFPID-5154333", "CSAFPID-5154334", "CSAFPID-5154335", "CSAFPID-5154336", "CSAFPID-5154337", "CSAFPID-5154338", "CSAFPID-5154339", "CSAFPID-5154340", "CSAFPID-5154341", "CSAFPID-5154342", "CSAFPID-5154343", "CSAFPID-5154344", "CSAFPID-5154345", "CSAFPID-5154346", "CSAFPID-5154347", "CSAFPID-5154348", "CSAFPID-5154349", "CSAFPID-5154350", "CSAFPID-5154351", "CSAFPID-5154352", "CSAFPID-5154353", "CSAFPID-5154354", "CSAFPID-5154355", "CSAFPID-5154356", "CSAFPID-5154357", "CSAFPID-5154358", "CSAFPID-5154359", "CSAFPID-5154360", "CSAFPID-5154361", "CSAFPID-5154362", "CSAFPID-5154363", "CSAFPID-5154364", "CSAFPID-5154365", "CSAFPID-5154366", "CSAFPID-5154367", "CSAFPID-5154368", "CSAFPID-5154369", "CSAFPID-5154370", "CSAFPID-5154371", "CSAFPID-5154372", "CSAFPID-5154373", "CSAFPID-5154374", "CSAFPID-5154375", "CSAFPID-5154376", "CSAFPID-5154377", "CSAFPID-5154378", "CSAFPID-5154379", "CSAFPID-5154380", "CSAFPID-5154381", "CSAFPID-5154382", "CSAFPID-5154383", "CSAFPID-5154384", "CSAFPID-5154385", "CSAFPID-5154386", "CSAFPID-5154387", "CSAFPID-5154388", "CSAFPID-5154389", "CSAFPID-5154390", "CSAFPID-5154391", "CSAFPID-5154392", "CSAFPID-5154393", "CSAFPID-5154394", "CSAFPID-5154395", "CSAFPID-5154396", "CSAFPID-5154397", "CSAFPID-5154398", "CSAFPID-5154399", "CSAFPID-5154400", "CSAFPID-5154401", "CSAFPID-5154402", "CSAFPID-5154403", "CSAFPID-5154404", "CSAFPID-5154405", "CSAFPID-5154406", "CSAFPID-5154407", "CSAFPID-5154408", "CSAFPID-5154409", "CSAFPID-5154410", "CSAFPID-5154411", "CSAFPID-5154412", "CSAFPID-5154413", "CSAFPID-5154414", "CSAFPID-5154415", "CSAFPID-5154416", "CSAFPID-5154417", "CSAFPID-5154418", "CSAFPID-5154419", "CSAFPID-5154420", "CSAFPID-5154421", "CSAFPID-5154422", "CSAFPID-5154423", "CSAFPID-5154424", "CSAFPID-5154425", "CSAFPID-5154426", "CSAFPID-5154427", "CSAFPID-5154428", "CSAFPID-5154429", "CSAFPID-5154430", "CSAFPID-5154431", "CSAFPID-5154432", "CSAFPID-5154433", "CSAFPID-5154434", "CSAFPID-5154435", "CSAFPID-5154436", "CSAFPID-5154437", "CSAFPID-5154438", "CSAFPID-5154439", "CSAFPID-5154440", "CSAFPID-5154441", "CSAFPID-5154442", "CSAFPID-5154443", "CSAFPID-5154444", "CSAFPID-5154445", "CSAFPID-5154446", "CSAFPID-5154447", "CSAFPID-5154448", "CSAFPID-5154449", "CSAFPID-5827639", "CSAFPID-5827640", "CSAFPID-5827641", "CSAFPID-5827642", "CSAFPID-5827643", "CSAFPID-5827644", "CSAFPID-5827645", "CSAFPID-5827646", "CSAFPID-5827647", "CSAFPID-5827648", "CSAFPID-5827649", "CSAFPID-5827650", "CSAFPID-5827651", "CSAFPID-5827652", "CSAFPID-5827653", "CSAFPID-5827654", "CSAFPID-5835906" ] }, "references": [ { "category": "external", "summary": "Source - nvd", "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-3059" }, { "category": "external", "summary": "Source raw - nvd", "url": "https://services.nvd.nist.gov/rest/json/cves/2.0?cveId=CVE-2026-3059" }, { "category": "external", "summary": "Source - cveprojectv5", "url": "https://www.cve.org/CVERecord?id=CVE-2026-3059" }, { "category": "external", "summary": "Source raw - cveprojectv5", "url": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/3xxx/CVE-2026-3059.json" }, { "category": "external", "summary": "Source - first", "url": "https://api.first.org/data/v1/epss?cve=CVE-2026-3059" }, { "category": "external", "summary": "Source raw - first", "url": "https://api.first.org/data/v1/epss?limit=10000&offset=0" }, { "category": "external", "summary": "Source - github", "url": "https://github.com/advisories/GHSA-rgq9-fqf5-fv58" }, { "category": "external", "summary": "Source raw - github", "url": "https://api.github.com/advisories/GHSA-rgq9-fqf5-fv58" }, { "category": "external", "summary": "Source - osv", "url": "https://www.googleapis.com/download/storage/v1/b/osv-vulnerabilities/o/PyPI%2FGHSA-rgq9-fqf5-fv58.json?alt=media" }, { "category": "external", "summary": "Source - github", "url": "https://api.github.com/advisories/GHSA-rgq9-fqf5-fv58" }, { "category": "external", "summary": "Source - first", "url": "https://api.first.org/data/v1/epss?limit=10000&offset=0" }, { "category": "external", "summary": "Reference - cveprojectv5; github; nvd; osv", "url": "https://github.com/sgl-project/sglang/blob/main/python/sglang/multimodal_gen/runtime/scheduler_client.py" }, { "category": "external", "summary": "Reference - cveprojectv5; github; nvd; osv", "url": "https://github.com/sgl-project/sglang/security/advisories/GHSA-3cp7-c6q2-94xr" }, { "category": "external", "summary": "Reference - cveprojectv5; nvd", "url": "https://orca.security/resources/blog/sglang-llm-framework-rce-vulnerabilities/" }, { "category": "external", "summary": "Reference - github; osv", "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-3059" }, { "category": "external", "summary": "Reference - github; osv", "url": "https://orca.security/resources/blog/sglang-llm-framework-rce-vulnerabilities" }, { "category": "external", "summary": "Reference - github", "url": "https://github.com/advisories/GHSA-rgq9-fqf5-fv58" } ], "scores": [ { "cvss_v3": { "version": "3.1", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", "baseScore": 9.8, "baseSeverity": "CRITICAL" }, "products": [ "CSAFPID-5154324", "CSAFPID-5154325", "CSAFPID-5154326", "CSAFPID-5154327", "CSAFPID-5154328", "CSAFPID-5154329", "CSAFPID-5154330", "CSAFPID-5154331", "CSAFPID-5154332", "CSAFPID-5154333", "CSAFPID-5154334", "CSAFPID-5154335", "CSAFPID-5154336", "CSAFPID-5154337", "CSAFPID-5154338", "CSAFPID-5154339", "CSAFPID-5154340", "CSAFPID-5154341", "CSAFPID-5154342", "CSAFPID-5154343", "CSAFPID-5154344", "CSAFPID-5154345", "CSAFPID-5154346", "CSAFPID-5154347", "CSAFPID-5154348", "CSAFPID-5154349", "CSAFPID-5154350", "CSAFPID-5154351", "CSAFPID-5154352", "CSAFPID-5154353", "CSAFPID-5154354", "CSAFPID-5154355", "CSAFPID-5154356", "CSAFPID-5154357", "CSAFPID-5154358", "CSAFPID-5154359", "CSAFPID-5154360", "CSAFPID-5154361", "CSAFPID-5154362", "CSAFPID-5154363", "CSAFPID-5154364", "CSAFPID-5154365", "CSAFPID-5154366", "CSAFPID-5154367", "CSAFPID-5154368", "CSAFPID-5154369", "CSAFPID-5154370", "CSAFPID-5154371", "CSAFPID-5154372", "CSAFPID-5154373", "CSAFPID-5154374", "CSAFPID-5154375", "CSAFPID-5154376", "CSAFPID-5154377", "CSAFPID-5154378", "CSAFPID-5154379", "CSAFPID-5154380", "CSAFPID-5154381", "CSAFPID-5154382", "CSAFPID-5154383", "CSAFPID-5154384", "CSAFPID-5154385", "CSAFPID-5154386", "CSAFPID-5154387", "CSAFPID-5154388", "CSAFPID-5154389", "CSAFPID-5154390", "CSAFPID-5154391", "CSAFPID-5154392", "CSAFPID-5154393", "CSAFPID-5154394", "CSAFPID-5154395", "CSAFPID-5154396", "CSAFPID-5154397", "CSAFPID-5154398", "CSAFPID-5154399", "CSAFPID-5154400", "CSAFPID-5154401", "CSAFPID-5154402", "CSAFPID-5154403", "CSAFPID-5154404", "CSAFPID-5154405", "CSAFPID-5154406", "CSAFPID-5154407", "CSAFPID-5154408", "CSAFPID-5154409", "CSAFPID-5154410", "CSAFPID-5154411", "CSAFPID-5154412", "CSAFPID-5154413", "CSAFPID-5154414", "CSAFPID-5154415", "CSAFPID-5154416", "CSAFPID-5154417", "CSAFPID-5154418", "CSAFPID-5154419", "CSAFPID-5154420", "CSAFPID-5154421", "CSAFPID-5154422", "CSAFPID-5154423", "CSAFPID-5154424", "CSAFPID-5154425", "CSAFPID-5154426", "CSAFPID-5154427", "CSAFPID-5154428", "CSAFPID-5154429", "CSAFPID-5154430", "CSAFPID-5154431", "CSAFPID-5154432", "CSAFPID-5154433", "CSAFPID-5154434", "CSAFPID-5154435", "CSAFPID-5154436", "CSAFPID-5154437", "CSAFPID-5154438", "CSAFPID-5154439", "CSAFPID-5154440", "CSAFPID-5154441", "CSAFPID-5154442", "CSAFPID-5154443", "CSAFPID-5154444", "CSAFPID-5154445", "CSAFPID-5154446", "CSAFPID-5154447", "CSAFPID-5154448", "CSAFPID-5154449", "CSAFPID-5810395", "CSAFPID-5827639", "CSAFPID-5827640", "CSAFPID-5827641", "CSAFPID-5827642", "CSAFPID-5827643", "CSAFPID-5827644", "CSAFPID-5827645", "CSAFPID-5827646", "CSAFPID-5827647", "CSAFPID-5827648", "CSAFPID-5827649", "CSAFPID-5827650", "CSAFPID-5827651", "CSAFPID-5827652", "CSAFPID-5827653", "CSAFPID-5827654", "CSAFPID-5835906" ] } ], "title": "CVE-2026-3059" } ] }