← All credits

Jiapeng Li

30 vulnerability records and advisories credit this contributor.

CVE-2026-109227

SGLang through 0.5.21 Memory Exhaustion DoS via Qwen-VL Video Preprocessing

CVE-2026-111391

SGLang 0.5.10 through 0.5.22 Code Injection via Debug Dumper Filter

CVE-2026-111160

LightLLM through 1.2.0 Unauthenticated DoS via pd_kv_trans_params Deserialization

CVE-2026-109228

SGLang through 0.5.21 Resource Budget Bypass via GLM-V Video Parameters

CVE-2026-109226

SGLang through 0.5.21 Audio Decompression Amplification via load_audio

CVE-2026-109225

SGLang through 0.5.21 Memory Exhaustion DoS via /v1/audio/transcriptions Upload

CVE-2026-109229

SGLang through 0.5.21 Decompression Bomb DoS via NanoNemotronVLImageProcessor

CVE-2026-103243

LightLLM through 1.2.0 Server-Side Request Forgery via multimodal endpoints

CVE-2026-103042

LightLLM through 1.2.0 Unauthenticated Memory Exhaustion via NCCL Control Channel set_value

CVE-2026-103040

LightLLM through 1.2.0 Unauthenticated Remote Code Execution via Router Profiler RPyC Service