Jiadai Wang

sglang-router through 0.3.2 Authorization Bypass via Mesh HA Management Routes

SGLang through 0.5.22 SSRF via bootstrap_host and bootstrap_port on Decode Worker

SGLang through 0.5.22 Memory Exhaustion via Unauthenticated Mooncake Decode Registrations

SGLang through 0.5.22 Memory Exhaustion via Mooncake STAGING_RSP chunk_idx

SGLang through 0.5.22 Cross-Request Abort via rid Prefix Matching

SGLang through 0.5.21 Memory Exhaustion DoS via Qwen-VL Video Preprocessing

SGLang through 0.5.21 KV Cache Poisoning via mm_hashes in /generate

SGLang 0.5.10 through 0.5.22 Code Injection via Debug Dumper Filter

SGLang through 0.5.21 Resource Budget Bypass via GLM-V Video Parameters

SGLang through 0.5.21 Audio Decompression Amplification via load_audio