← All credits
Mingkai Yu
7 vulnerability records and advisories credit this contributor.
CVE-2026-93838
SGLang through 0.5.20 Unbounded Memory Allocation via STAGING_REQ chunk_idx
CVE-2026-93841
vLLM through 0.29.0 Adjacent-Request Sampler State Corruption via Unvalidated Prompt Token IDs
CVE-2026-93840
vLLM before 0.29.0 Cross-Request Logits Corruption via allowed_token_ids
CVE-2026-93839
LightLLM through 1.2.0 Missing Authentication in PD Master /pd_register WebSocket Endpoint
CVE-2026-92983
InternLM LMDeploy through 0.17.0 Memory Exhaustion via Session ID Mismatch
CVE-2026-92972
SGLang through 0.5.19 Unauthenticated Route Poisoning via PUT endpoint
CVE-2026-93688
SGLang through 0.5.19 Unbounded Memory Allocation via bootstrap_room