Staging Environment: Content and features may be unstable or change without notice.

Advisory Package Curation

CVE-2026-3059

Progress 0 / 0

Advisory Summaries

github_osv/GHSA-rgq9-fqf5-fv58

SGLang's multimodal generation module is vulnerable to unauthenticated remote code execution through the ZMQ broker, which deserializes untrusted data using pickle.loads() without authentication.

gitlab/pypi/sglang/CVE-2026-3059

SGLang's multimodal generation module is vulnerable to unauthenticated remote code execution through the ZMQ broker, which deserializes untrusted data using pickle.loads() without authentication.

pypa/sglang/PYSEC-2026-539

SGLang's multimodal generation module is vulnerable to unauthenticated remote code execution through the ZMQ broker, which deserializes untrusted data using pickle.loads() without authentication.

pysec/PYSEC-2026-539

SGLang's multimodal generation module is vulnerable to unauthenticated remote code execution through the ZMQ broker, which deserializes untrusted data using pickle.loads() without authentication.