← All credits
Jiapeng Li
23 vulnerability records and advisories credit this contributor.
CVE-2026-103243
LightLLM through 1.2.0 Server-Side Request Forgery via multimodal endpoints
CVE-2026-103042
LightLLM through 1.2.0 Unauthenticated Memory Exhaustion via NCCL Control Channel set_value
CVE-2026-103040
LightLLM through 1.2.0 Unauthenticated Remote Code Execution via Router Profiler RPyC Service
CVE-2026-103041
LightLLM through 1.2.0 Unauthenticated Remote Code Execution via Embed Cache RPyC Service
CVE-2026-102634
SGLang through 0.5.20 Denial of Service via Duplicate bootstrap_room
CVE-2026-94626
vLLM through 0.29.0 Memory Exhaustion via Unvalidated NIXL tp_size
CVE-2026-96560
LightLLM through 1.2.0 Unauthenticated Remote Code Execution via NCCL PD RPyC Control Channel
CVE-2026-93841
vLLM through 0.29.0 Adjacent-Request Sampler State Corruption via Unvalidated Prompt Token IDs
CVE-2026-93840
vLLM before 0.29.0 Cross-Request Logits Corruption via allowed_token_ids
CVE-2026-93839
LightLLM through 1.2.0 Missing Authentication in PD Master /pd_register WebSocket Endpoint