{"data":{"ecosystem":"pypi","name":"sglang","url":"https://aisecwatch.com/packages/pypi/sglang","latestVersion":"0.5.21","firstReleaseAt":"2024-01-16T05:56:37.988Z","repository":"https://github.com/sgl-project/sglang/issues","llm":{"exposure":"direct","depth":0,"integratedAt":"2024-01-16T05:56:37.988Z","integratedVersion":"0.1.3","sdks":["anthropic","huggingface","openai","outlines"],"path":[]},"authority":{"profile":["http"],"fromDependencies":["pypi:aiohttp","pypi:requests"]},"dependencies":[{"ecosystem":"pypi","name":"accelerate","versionSpec":null,"scope":"extra:test"},{"ecosystem":"pypi","name":"anthropic","versionSpec":">=0.20.0","scope":"runtime"},{"ecosystem":"pypi","name":"auto-round","versionSpec":">=0.13.1","scope":"extra:test"},{"ecosystem":"pypi","name":"bitsandbytes","versionSpec":null,"scope":"extra:test"},{"ecosystem":"pypi","name":"cache-dit","versionSpec":"==1.5.1","scope":"extra:diffusion"},{"ecosystem":"pypi","name":"compressed-tensors","versionSpec":"==0.18.0","scope":"runtime"},{"ecosystem":"pypi","name":"datasets","versionSpec":null,"scope":"runtime"},{"ecosystem":"pypi","name":"diffusers","versionSpec":"==0.37.0","scope":"extra:diffusion"},{"ecosystem":"pypi","name":"kernels","versionSpec":"<0.15,>=0.14.1","scope":"runtime"},{"ecosystem":"pypi","name":"lm-eval","versionSpec":">=0.4.9.2","scope":"extra:test"},{"ecosystem":"pypi","name":"mistral-common","versionSpec":">=1.11.5","scope":"runtime"},{"ecosystem":"pypi","name":"modelscope","versionSpec":null,"scope":"runtime"},{"ecosystem":"pypi","name":"nvidia-modelopt","versionSpec":null,"scope":"extra:diffusion"},{"ecosystem":"pypi","name":"openai","versionSpec":"==2.6.1","scope":"runtime"},{"ecosystem":"pypi","name":"outlines","versionSpec":"==0.1.11","scope":"runtime"},{"ecosystem":"pypi","name":"peft","versionSpec":">=0.18.0","scope":"extra:test"},{"ecosystem":"pypi","name":"sentence-transformers","versionSpec":null,"scope":"extra:test"},{"ecosystem":"pypi","name":"sgl-eval","versionSpec":"==0.1.2","scope":"extra:test"},{"ecosystem":"pypi","name":"smg-grpc-servicer","versionSpec":">=0.9.0","scope":"runtime"},{"ecosystem":"pypi","name":"timm","versionSpec":"==1.0.16","scope":"runtime"},{"ecosystem":"pypi","name":"tokenizers","versionSpec":"==0.22.2","scope":"runtime"},{"ecosystem":"pypi","name":"transformers","versionSpec":"==5.12.1","scope":"runtime"},{"ecosystem":"pypi","name":"xgrammar","versionSpec":"==0.2.7","scope":"runtime"},{"ecosystem":"pypi","name":"checkpoint-engine","versionSpec":"==0.1.2","scope":"extra:checkpoint-engine"},{"ecosystem":"pypi","name":"humming-kernels","versionSpec":"==0.1.12","scope":"runtime"},{"ecosystem":"pypi","name":"addict","versionSpec":"==2.4.0","scope":"extra:diffusion"},{"ecosystem":"pypi","name":"aiohttp","versionSpec":null,"scope":"runtime"},{"ecosystem":"pypi","name":"antlr4-python3-runtime","versionSpec":"==4.9.3","scope":"extra:test"},{"ecosystem":"pypi","name":"apache-tvm-ffi","versionSpec":"==0.1.11","scope":"runtime"},{"ecosystem":"pypi","name":"av","versionSpec":"==16.1.0","scope":"runtime"},{"ecosystem":"pypi","name":"blobfile","versionSpec":"==3.0.0","scope":"runtime"},{"ecosystem":"pypi","name":"build","versionSpec":null,"scope":"runtime"},{"ecosystem":"pypi","name":"cloudpickle","versionSpec":"==3.1.2","scope":"extra:diffusion"},{"ecosystem":"pypi","name":"cuda-python","versionSpec":">=13.0","scope":"runtime"},{"ecosystem":"pypi","name":"cuda-tile","versionSpec":"==1.6.0rc5","scope":"runtime"},{"ecosystem":"pypi","name":"decord2","versionSpec":null,"scope":"runtime"},{"ecosystem":"pypi","name":"diff-cover","versionSpec":null,"scope":"extra:test"},{"ecosystem":"pypi","name":"distro","versionSpec":null,"scope":"runtime"},{"ecosystem":"pypi","name":"easydict","versionSpec":null,"scope":"runtime"},{"ecosystem":"pypi","name":"einops","versionSpec":null,"scope":"runtime"},{"ecosystem":"pypi","name":"expecttest","versionSpec":null,"scope":"extra:test"},{"ecosystem":"pypi","name":"fastapi","versionSpec":null,"scope":"runtime"},{"ecosystem":"pypi","name":"fastokens","versionSpec":"<0.2.0,>=0.1.1","scope":"extra:fastokens"},{"ecosystem":"pypi","name":"flash-attn-4","versionSpec":">=4.0.0b18","scope":"runtime"},{"ecosystem":"pypi","name":"flashinfer-python","versionSpec":"==0.6.18","scope":"runtime"},{"ecosystem":"pypi","name":"gguf","versionSpec":null,"scope":"runtime"},{"ecosystem":"pypi","name":"granian","versionSpec":">=2.6.0","scope":"extra:http2"},{"ecosystem":"pypi","name":"imageio","versionSpec":"==2.36.0","scope":"extra:diffusion"},{"ecosystem":"pypi","name":"imageio-ffmpeg","versionSpec":"==0.5.1","scope":"extra:diffusion"},{"ecosystem":"pypi","name":"interegular","versionSpec":null,"scope":"runtime"},{"ecosystem":"pypi","name":"ipython","versionSpec":null,"scope":"runtime"},{"ecosystem":"pypi","name":"jsonlines","versionSpec":null,"scope":"extra:test"},{"ecosystem":"pypi","name":"llguidance","versionSpec":"<2.0.0,>=1.7.6","scope":"runtime"},{"ecosystem":"pypi","name":"loguru","versionSpec":">=0.7","scope":"extra:diffusion-qvg"},{"ecosystem":"pypi","name":"matplotlib","versionSpec":null,"scope":"extra:test"},{"ecosystem":"pypi","name":"moviepy","versionSpec":">=2.0.0","scope":"extra:diffusion"},{"ecosystem":"pypi","name":"msgpack","versionSpec":null,"scope":"extra:diffusion"},{"ecosystem":"pypi","name":"msgspec","versionSpec":null,"scope":"runtime"},{"ecosystem":"pypi","name":"ninja","versionSpec":null,"scope":"runtime"},{"ecosystem":"pypi","name":"numba","versionSpec":"==0.65.1","scope":"runtime"},{"ecosystem":"pypi","name":"numpy","versionSpec":null,"scope":"runtime"},{"ecosystem":"pypi","name":"nvidia-cutlass-dsl","versionSpec":"==4.6.2","scope":"runtime"},{"ecosystem":"pypi","name":"nvidia-mathdx","versionSpec":"==25.6.0","scope":"runtime"},{"ecosystem":"pypi","name":"nvidia-ml-py","versionSpec":null,"scope":"runtime"},{"ecosystem":"pypi","name":"nvshmem4py-cu13","versionSpec":null,"scope":"runtime"},{"ecosystem":"pypi","name":"openai-harmony","versionSpec":"==0.0.4","scope":"runtime"},{"ecosystem":"pypi","name":"opencv-python-headless","versionSpec":"==4.10.0.84","scope":"extra:diffusion"},{"ecosystem":"pypi","name":"opentelemetry-api","versionSpec":null,"scope":"extra:tracing"},{"ecosystem":"pypi","name":"opentelemetry-exporter-otlp","versionSpec":null,"scope":"extra:tracing"},{"ecosystem":"pypi","name":"opentelemetry-exporter-otlp-proto-grpc","versionSpec":null,"scope":"extra:tracing"},{"ecosystem":"pypi","name":"opentelemetry-sdk","versionSpec":null,"scope":"extra:tracing"},{"ecosystem":"pypi","name":"orjson","versionSpec":null,"scope":"runtime"},{"ecosystem":"pypi","name":"packaging","versionSpec":null,"scope":"runtime"},{"ecosystem":"pypi","name":"pandas","versionSpec":null,"scope":"extra:test"},{"ecosystem":"pypi","name":"parameterized","versionSpec":null,"scope":"extra:test"},{"ecosystem":"pypi","name":"partial-json-parser","versionSpec":null,"scope":"runtime"},{"ecosystem":"pypi","name":"pillow","versionSpec":null,"scope":"runtime"},{"ecosystem":"pypi","name":"polars","versionSpec":null,"scope":"extra:test"},{"ecosystem":"pypi","name":"prometheus-client","versionSpec":">=0.20.0","scope":"runtime"},{"ecosystem":"pypi","name":"psutil","versionSpec":null,"scope":"runtime"},{"ecosystem":"pypi","name":"pybase64","versionSpec":null,"scope":"runtime"},{"ecosystem":"pypi","name":"pydantic","versionSpec":null,"scope":"runtime"},{"ecosystem":"pypi","name":"pymupdf","versionSpec":null,"scope":"extra:test"},{"ecosystem":"pypi","name":"py-spy","versionSpec":null,"scope":"runtime"},{"ecosystem":"pypi","name":"pytest","versionSpec":null,"scope":"extra:test"},{"ecosystem":"pypi","name":"pytest-cov","versionSpec":null,"scope":"extra:test"},{"ecosystem":"pypi","name":"python-multipart","versionSpec":null,"scope":"runtime"},{"ecosystem":"pypi","name":"pyyaml","versionSpec":"==6.0.1","scope":"extra:diffusion"},{"ecosystem":"pypi","name":"pyzmq","versionSpec":">=25.1.2","scope":"runtime"},{"ecosystem":"pypi","name":"quack-kernels","versionSpec":"==0.6.4","scope":"runtime"},{"ecosystem":"pypi","name":"ray","versionSpec":">=2.55.1","scope":"extra:ray"},{"ecosystem":"pypi","name":"regex","versionSpec":null,"scope":"runtime"},{"ecosystem":"pypi","name":"remote-pdb","versionSpec":"==2.1.0","scope":"extra:diffusion"},{"ecosystem":"pypi","name":"requests","versionSpec":null,"scope":"runtime"},{"ecosystem":"pypi","name":"runai-model-streamer","versionSpec":">=0.15.7","scope":"extra:runai"},{"ecosystem":"pypi","name":"scikit-image","versionSpec":"==0.25.2","scope":"extra:diffusion"},{"ecosystem":"pypi","name":"scipy","versionSpec":null,"scope":"runtime"},{"ecosystem":"pypi","name":"sentencepiece","versionSpec":"==0.2.1","scope":"runtime"},{"ecosystem":"pypi","name":"setproctitle","versionSpec":null,"scope":"runtime"},{"ecosystem":"pypi","name":"sglang-kernel","versionSpec":"==0.4.7","scope":"runtime"},{"ecosystem":"pypi","name":"sgl-deep-ep","versionSpec":"==0.1.2","scope":"runtime"},{"ecosystem":"pypi","name":"sgl-deep-gemm","versionSpec":"==0.2.0","scope":"runtime"},{"ecosystem":"pypi","name":"soundfile","versionSpec":"==0.13.1","scope":"runtime"},{"ecosystem":"pypi","name":"st-attn","versionSpec":"==0.0.7","scope":"extra:diffusion"},{"ecosystem":"pypi","name":"tabulate","versionSpec":null,"scope":"extra:test"},{"ecosystem":"pypi","name":"termcolor","versionSpec":">=2.3","scope":"extra:diffusion-qvg"},{"ecosystem":"pypi","name":"tiktoken","versionSpec":null,"scope":"runtime"},{"ecosystem":"pypi","name":"tilelang","versionSpec":"==0.1.12","scope":"runtime"},{"ecosystem":"pypi","name":"tokenspeed-mla","versionSpec":"==0.1.8","scope":"runtime"},{"ecosystem":"pypi","name":"tomli","versionSpec":null,"scope":"runtime"},{"ecosystem":"pypi","name":"torch","versionSpec":"==2.13.0","scope":"runtime"},{"ecosystem":"pypi","name":"torchaudio","versionSpec":"==2.11.0","scope":"runtime"},{"ecosystem":"pypi","name":"torchcodec","versionSpec":"==0.15.0","scope":"runtime"},{"ecosystem":"pypi","name":"torch-memory-saver","versionSpec":">=0.0.9.post1","scope":"runtime"},{"ecosystem":"pypi","name":"torchvision","versionSpec":null,"scope":"runtime"},{"ecosystem":"pypi","name":"tqdm","versionSpec":null,"scope":"runtime"},{"ecosystem":"pypi","name":"trimesh","versionSpec":">=4.0.0","scope":"extra:diffusion"},{"ecosystem":"pypi","name":"uvicorn","versionSpec":null,"scope":"runtime"},{"ecosystem":"pypi","name":"uvloop","versionSpec":null,"scope":"runtime"},{"ecosystem":"pypi","name":"vsa","versionSpec":"==0.0.4","scope":"extra:diffusion"},{"ecosystem":"pypi","name":"watchfiles","versionSpec":null,"scope":"runtime"},{"ecosystem":"pypi","name":"websockets","versionSpec":null,"scope":"extra:diffusion"},{"ecosystem":"pypi","name":"xatlas","versionSpec":null,"scope":"extra:diffusion"},{"ecosystem":"pypi","name":"xxhash","versionSpec":null,"scope":"runtime"},{"ecosystem":"pypi","name":"zstandard","versionSpec":null,"scope":"runtime"}],"advisories":[{"id":"3aeffdb0-94a0-4a54-8016-8690f8544fd0","url":"https://aisecwatch.com/issues/3aeffdb0-94a0-4a54-8016-8690f8544fd0","cveId":"CVE-2026-7669","title":"CVE-2026-7669: A vulnerability was detected in sgl-project SGLang up to 0.5.9. Impacted is the function get_tokenizer of the file…","headline":"SGLang deserialization of untrusted data in get_tokenizer","severity":"medium","publishedAt":"2026-05-02T22:16:24.080Z","affected":["sglang@<= 0.5.9"],"epssScore":0.00422,"matchedBy":"ecosystem"}],"checkedAt":"2026-10-09T21:58:52.363Z"},"meta":{"advisoryMatching":"by package name and ecosystem; an advisory with no ecosystem recorded for the package is matched by name alone"}}