https://db.gcve.eu Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Mon, 19 Oct 2026 20:46:39 +0000 https://db.gcve.eu/vuln/fkie_cve-2026-112267 <p>SGLang through 0.5.22 in prefill/decode disaggregation mode contains a server-side request forgery vulnerability that allows unauthenticated attackers to trigger outbound requests via client-supplied bootstrap_host and bootstrap_port fields. Attackers sending crafted requests to the Decode worker&#39;s /generate endpoint can probe internal hosts and ports and block the shared scheduler loop, delaying other inference requests.</p> <p>SGLang through 0.5.22 in prefill/decode disaggregation mode contains a server-side request forgery vulnerability that allows unauthenticated attackers to trigger outbound requests via client-supplied bootstrap_host and bootstrap_port fields. Attackers sending crafted requests to the Decode worker&#39;s /generate endpoint can probe internal hosts and ports and block the shared scheduler loop, delaying other inference requests.</p> https://db.gcve.eu/vuln/fkie_cve-2026-112267 https://db.gcve.eu/vuln/ghsa-mg89-3m78-qwqg <p>SGLang through 0.5.22 in prefill/decode disaggregation mode contains a server-side request forgery vulnerability that allows unauthenticated attackers to trigger outbound requests via client-supplied bootstrap_host and bootstrap_port fields. Attackers sending crafted requests to the Decode worker&#39;s /generate endpoint can probe internal hosts and ports and block the shared scheduler loop, delaying other inference requests.</p> <p>SGLang through 0.5.22 in prefill/decode disaggregation mode contains a server-side request forgery vulnerability that allows unauthenticated attackers to trigger outbound requests via client-supplied bootstrap_host and bootstrap_port fields. Attackers sending crafted requests to the Decode worker&#39;s /generate endpoint can probe internal hosts and ports and block the shared scheduler loop, delaying other inference requests.</p> https://db.gcve.eu/vuln/ghsa-mg89-3m78-qwqg