Vulnerabilities
Aggregated CVE / GHSA / KEV / OSV — filter by tag and category.
| ID | Title | |
|---|---|---|
| CVE-2026-15978 |
|
Vulnerability in lmsys (CVE-2026-15978)
vulnerability in lmsys (CVE-2026-15978). Confidential information can be exposed externally.
|
| CVE-2026-15976 |
|
Unsafe Deserialization in deserialization (CVE-2026-15976)
vulnerability in deserialization (CVE-2026-15976). Successful exploitation can lead to full system takeover.
|
| CVE-2026-15977 |
|
Vulnerability in lmsys (CVE-2026-15977)
vulnerability in lmsys (CVE-2026-15977). Confidential information can be exposed externally.
|
| CVE-2026-15971 |
|
Vulnerability in lmsys (CVE-2026-15971)
vulnerability in lmsys (CVE-2026-15971). Successful exploitation can lead to full system takeover.
|
| CVE-2026-15974 |
|
SSRF (Server-Side Request Forgery) in ssrf (CVE-2026-15974)
SSRF in ssrf (CVE-2026-15974). Confidential information can be exposed externally.
|
| CVE-2026-15969 |
|
Unsafe Deserialization in lmsys (CVE-2026-15969)
vulnerability in lmsys (CVE-2026-15969). Successful exploitation can lead to full system takeover.
|
| CVE-2026-14890 |
|
Unsafe Deserialization in deserialization (CVE-2026-14890)
vulnerability in deserialization (CVE-2026-14890). Confidential information can be exposed externally.
|
| CVE-2026-10775 |
|
Vulnerability in sglang (CVE-2026-10775)
vulnerability in sglang (CVE-2026-10775). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-5760 |
|
Code Injection in jvn (CVE-2026-5760)
code injection in jvn (CVE-2026-5760). Successful exploitation can lead to full system takeover.
|
| CVE-2026-7304 |
|
Unsafe Deserialization in sglang (CVE-2026-7304)
vulnerability in sglang (CVE-2026-7304). Successful exploitation can lead to full system takeover.
|
| CVE-2026-7301 |
|
Unsafe Deserialization in sglang (CVE-2026-7301)
vulnerability in sglang (CVE-2026-7301). Successful exploitation can lead to full system takeover.
|
| CVE-2026-7302 |
|
Vulnerability in sglang (CVE-2026-7302)
vulnerability in sglang (CVE-2026-7302). Data can be tampered with by attackers.
|
| CVE-2026-3989 |
|
Unsafe Deserialization in deserialization (CVE-2026-3989)
vulnerability in deserialization (CVE-2026-3989). Successful exploitation can lead to full system takeover. Exploitable via ``replay_request_dump.py``.
|