366 matches found
Deserialization of Untrusted Data
Overview sglang is a SGLang is a fast serving framework for large language models and vision language models. Affected versions of this package are vulnerable to Deserialization of Untrusted Data via the encodereceiver.py message handling logic in the encoder parallel disaggregation system. An...
SGLang's multimodal generation module is vulnerable to unauthenticated remote code execution through the ZMQ broker
SGLang's multimodal generation module is vulnerable to unauthenticated remote code execution through the ZMQ broker, which deserializes untrusted data using pickle.loads without authentication...
GHSA-RGQ9-FQF5-FV58 SGLang's multimodal generation module is vulnerable to unauthenticated remote code execution through the ZMQ broker
SGLang's multimodal generation module is vulnerable to unauthenticated remote code execution through the ZMQ broker, which deserializes untrusted data using pickle.loads without authentication...
CVE-2026-3059
SGLang's multimodal generation module is vulnerable to unauthenticated remote code execution through the ZMQ broker, which deserializes untrusted data using pickle.loads without authentication...
Exploit for CVE-2024-50050
--- 💀 LlamaStack-RCE: CVE-2024-50050 Supply Chain Exploitatio...
EUVD-2020-7240
Malware in sbrugna...
EUVD-2014-7076
Malware in sbrugna...
EUVD-2014-7077
Malware in sbrugna...
EUVD-2020-23928
Malware in sbrugna...
EUVD-2016-8787
Malware in sbrugna...
EUVD-2023-31803
Malicious code in bioql PyPI...
EUVD-2021-7673
Malicious code in bioql PyPI...
EUVD-2021-7674
Malicious code in bioql PyPI...
EUVD-2025-12672
Malicious code in bioql PyPI...
EUVD-2025-13625
Malicious code in bioql PyPI...
EUVD-2021-7676
Malicious code in bioql PyPI...
EUVD-2021-7675
Malicious code in bioql PyPI...
CVE-2025-10975 GuanxingLu vlarl ZeroMQ reasoning_server.py run_reasoning_server deserialization
A vulnerability was found in GuanxingLu vlarl up to 31abc0baf53ef8f5db666a1c882e1ea64def2997. This vulnerability affects the function experiments.robot.bridge.reasoningserver::runreasoningserver of the file experiments/robot/bridge/reasoningserver.py of the component ZeroMQ. Performing manipulati...
CVE-2025-10772
A vulnerability was identified in huggingface LeRobot up to 0.3.3. Affected by this vulnerability is an unknown functionality of the file lerobot/common/robotdevices/robots/lekiwiremote.py of the component ZeroMQ Socket Handler. The manipulation leads to missing authentication. The attack can onl...
CVE-2025-10772
A vulnerability was identified in huggingface LeRobot up to 0.3.3. Affected by this vulnerability is an unknown functionality of the file lerobot/common/robotdevices/robots/lekiwiremote.py of the component ZeroMQ Socket Handler. The manipulation leads to missing authentication. The attack can onl...