CVE-2026-109227 - SGLang through 0.5.21 Memory Exhaustion DoS via Qwen-VL Video Preprocessing
CVE ID :CVE-2026-109227 Published : Oct. 12, 2026, 2:17 p.m. | 1 hour, 14 minutes ago Description :SGLang through 0.5.21 contains an unbounded memory allocation vulnerability in preprocess_video in qwen_vl.py that decodes frames at full source resolution before applying max_pixels limits....