https://db.gcve.eu/rss/recent/all/10 Most recent entries from all 2026-10-12T23:54:42.080340+00:00 Vulnerability-Lookup info@gcve.eu python-feedgen Contains only the most 10 recent entries. https://db.gcve.eu/vuln/fkie_cve-2026-109227 fkie_cve-2026-109227 2026-10-12T23:54:42.100646+00:00

SGLang through 0.5.21 contains an unbounded memory allocation vulnerability in preprocess_video in qwen_vl.py that decodes frames at full source resolution before applying max_pixels limits. Remote attackers can submit high-resolution videos to /v1/chat/completions on Qwen-VL deployments, and concurrent requests exhaust worker memory causing denial of service.

 https://db.gcve.eu/vuln/ghsa-6h2g-h3jf-2prp GHSA-6h2g-h3jf-2prp 2026-10-12T23:54:42.101073+00:00

SGLang through 0.5.21 contains an unbounded memory allocation vulnerability in preprocess_video in qwen_vl.py that decodes frames at full source resolution before applying max_pixels limits. Remote attackers can submit high-resolution videos to /v1/chat/completions on Qwen-VL deployments, and concurrent requests exhaust worker memory causing denial of service.