Publish Advisories

GHSA-hvwj-8w5g-28rg
GHSA-jx93-g359-86wm
GHSA-rgq9-fqf5-fv58
GHSA-4w7w-66w2-5vf9
GHSA-p9ff-h696-f583
GHSA-v2wj-q39q-566r

Author: advisory-database[bot]

advisories/github-reviewed/2026/03/GHSA-hvwj-8w5g-28rg/GHSA-hvwj-8w5g-28rg.json

@@ -1,7 +1,7 @@
 {
   "schema_version": "1.4.0",
   "id": "GHSA-hvwj-8w5g-28rg",
-  "modified": "2026-03-12T17:39:04Z",
+  "modified": "2026-04-07T22:14:04Z",
   "published": "2026-03-12T12:30:29Z",
   "aliases": [
     "CVE-2026-3989"
@@ -28,18 +28,25 @@
               "introduced": "0"
             },
             {
-              "last_affected": "0.5.9"
+              "fixed": "0.5.10"
             }
           ]
         }
-      ]
+      ],
+      "database_specific": {
+        "last_known_affected_version_range": "<= 0.5.9"
+      }
     }
   ],
   "references": [
     {
       "type": "ADVISORY",
       "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-3989"
     },
+    {
+      "type": "WEB",
+      "url": "https://github.com/sgl-project/sglang/pull/20904"
+    },
     {
       "type": "PACKAGE",
       "url": "https://github.com/sgl-project/sglang"
@@ -48,6 +55,10 @@
       "type": "WEB",
       "url": "https://github.com/sgl-project/sglang/blob/main/scripts/playground/replay_request_dump.py"
     },
+    {
+      "type": "WEB",
+      "url": "https://github.com/sgl-project/sglang/releases/tag/v0.5.10"
+    },
     {
       "type": "WEB",
       "url": "https://orca.security/resources/blog/sglang-llm-framework-rce-vulnerabilities"

advisories/github-reviewed/2026/03/GHSA-jx93-g359-86wm/GHSA-jx93-g359-86wm.json

@@ -1,7 +1,7 @@
 {
   "schema_version": "1.4.0",
   "id": "GHSA-jx93-g359-86wm",
-  "modified": "2026-04-07T22:12:43Z",
+  "modified": "2026-04-07T22:14:15Z",
   "published": "2026-03-12T12:30:29Z",
   "aliases": [
     "CVE-2026-3060"
@@ -28,11 +28,14 @@
               "introduced": "0"
             },
             {
-              "last_affected": "0.5.9"
+              "fixed": "0.5.10"
             }
           ]
         }
-      ]
+      ],
+      "database_specific": {
+        "last_known_affected_version_range": "<= 0.5.9"
+      }
     }
   ],
   "references": [

advisories/github-reviewed/2026/03/GHSA-rgq9-fqf5-fv58/GHSA-rgq9-fqf5-fv58.json

@@ -1,7 +1,7 @@
 {
   "schema_version": "1.4.0",
   "id": "GHSA-rgq9-fqf5-fv58",
-  "modified": "2026-04-07T22:12:51Z",
+  "modified": "2026-04-07T22:14:24Z",
   "published": "2026-03-12T12:30:29Z",
   "aliases": [
     "CVE-2026-3059"
@@ -28,11 +28,14 @@
               "introduced": "0"
             },
             {
-              "last_affected": "0.5.9"
+              "fixed": "0.5.10"
             }
           ]
         }
-      ]
+      ],
+      "database_specific": {
+        "last_known_affected_version_range": "<= 0.5.9"
+      }
     }
   ],
   "references": [

advisories/github-reviewed/2026/04/GHSA-4w7w-66w2-5vf9/GHSA-4w7w-66w2-5vf9.json

@@ -1,7 +1,7 @@
 {
   "schema_version": "1.4.0",
   "id": "GHSA-4w7w-66w2-5vf9",
-  "modified": "2026-04-07T14:18:32Z",
+  "modified": "2026-04-07T22:16:27Z",
   "published": "2026-04-06T18:03:46Z",
   "aliases": [
     "CVE-2026-39365"
@@ -87,6 +87,10 @@
       "type": "WEB",
       "url": "https://github.com/vitejs/vite/security/advisories/GHSA-4w7w-66w2-5vf9"
     },
+    {
+      "type": "ADVISORY",
+      "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-39365"
+    },
     {
       "type": "WEB",
       "url": "https://github.com/vitejs/vite/pull/22161"
@@ -120,6 +124,6 @@
     "severity": "MODERATE",
     "github_reviewed": true,
     "github_reviewed_at": "2026-04-06T18:03:46Z",
-    "nvd_published_at": null
+    "nvd_published_at": "2026-04-07T20:16:30Z"
   }
 }

advisories/github-reviewed/2026/04/GHSA-p9ff-h696-f583/GHSA-p9ff-h696-f583.json

@@ -1,7 +1,7 @@
 {
   "schema_version": "1.4.0",
   "id": "GHSA-p9ff-h696-f583",
-  "modified": "2026-04-07T14:21:49Z",
+  "modified": "2026-04-07T22:16:11Z",
   "published": "2026-04-06T18:03:24Z",
   "aliases": [
     "CVE-2026-39363"
@@ -87,6 +87,10 @@
       "type": "WEB",
       "url": "https://github.com/vitejs/vite/security/advisories/GHSA-p9ff-h696-f583"
     },
+    {
+      "type": "ADVISORY",
+      "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-39363"
+    },
     {
       "type": "WEB",
       "url": "https://github.com/vitejs/vite/pull/22159"
@@ -120,6 +124,6 @@
     "severity": "HIGH",
     "github_reviewed": true,
     "github_reviewed_at": "2026-04-06T18:03:24Z",
-    "nvd_published_at": null
+    "nvd_published_at": "2026-04-07T20:16:30Z"
   }
 }

advisories/github-reviewed/2026/04/GHSA-v2wj-q39q-566r/GHSA-v2wj-q39q-566r.json

@@ -1,7 +1,7 @@
 {
   "schema_version": "1.4.0",
   "id": "GHSA-v2wj-q39q-566r",
-  "modified": "2026-04-07T14:18:17Z",
+  "modified": "2026-04-07T22:16:17Z",
   "published": "2026-04-06T18:03:32Z",
   "aliases": [
     "CVE-2026-39364"
@@ -65,6 +65,10 @@
       "type": "WEB",
       "url": "https://github.com/vitejs/vite/security/advisories/GHSA-v2wj-q39q-566r"
     },
+    {
+      "type": "ADVISORY",
+      "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-39364"
+    },
     {
       "type": "WEB",
       "url": "https://github.com/vitejs/vite/pull/22160"
@@ -94,6 +98,6 @@
     "severity": "HIGH",
     "github_reviewed": true,
     "github_reviewed_at": "2026-04-06T18:03:32Z",
-    "nvd_published_at": null
+    "nvd_published_at": "2026-04-07T20:16:30Z"
   }
 }