What is GHSA-vwmc-327h-6x3j?

GHSA-vwmc-327h-6x3j is a security advisory published by GitHub Security Advisories with High severity. SGLang contains a credential leakage vulnerability in the /server_info endpoint, which will...

Which CVE IDs does GHSA-vwmc-327h-6x3j cover?

GHSA-vwmc-327h-6x3j covers the following CVE IDs: CVE-2026-15977. Each CVE has its own detail page on EchelonGraph Pulse with the synthesized EG score.

What is the CVSS v3 score of GHSA-vwmc-327h-6x3j?

GHSA-vwmc-327h-6x3j has a CVSS v3 base score of 7.5, published by GitHub Security Advisories.

GHSA-vwmc-327h-6x3jHighCVSS 7.5

SGLang contains a credential leakage vulnerability in the /server_info endpoint, which will...

Vendor

GitHub Security Advisories

Published

July 30, 2026

Last Modified

July 31, 2026

🔗 CVE IDs covered (1)

CVE-2026-15977 →

📋 Description

SGLang contains a credential leakage vulnerability in the /server_info endpoint, which will return API keys and SSL keyfile information when only the --admin-api-key is configured.

🔗 References (4)

https://github.com/sgl-project/sglang/security/advisories/GHSA-jx7q-p32r-7wx8
https://nvd.nist.gov/vuln/detail/CVE-2026-15977
https://thoughts.apoorvdayal.com/posts/sglang-disclosures
https://github.com/advisories/GHSA-vwmc-327h-6x3j