https://db.gcve.eu Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Sat, 17 Oct 2026 08:06:34 +0000 https://db.gcve.eu/vuln/cve-2026-111392 <p><strong>Affected:</strong> sgl-project sglang</p> <p>SGLang through 0.5.21 trusts caller-supplied mm_hashes values as the multimodal prefix-cache key, allowing remote attackers to poison cached KV entries across requests. Attackers can send a different image under a known or predicted hash via /generate to disclose another request&#39;s image content or corrupt victims&#39; responses.</p> <p><strong>Affected:</strong> sgl-project sglang</p> <p>SGLang through 0.5.21 trusts caller-supplied mm_hashes values as the multimodal prefix-cache key, allowing remote attackers to poison cached KV entries across requests. Attackers can send a different image under a known or predicted hash via /generate to disclose another request&#39;s image content or corrupt victims&#39; responses.</p> https://db.gcve.eu/vuln/cve-2026-111392