AI Security Threat Feed

picklescan: PyTorch bypass allows undetected RCE

llama-index: DocugamiReader MD5 hash collision drops chunks

llama-index Obsidian reader: hardlink path traversal leaks files

llama-index: JSONReader DoS via recursive JSON parsing

llama-index ArxivReader: MD5 collision corrupts training data

llama-index: RCE via unsafe pickle deserialization

MLflow: unauthenticated SSRF in gateway proxy

vllm: ReDoS in inference endpoints enables DoS

vLLM: DoS via unbounded XGrammar schema cache

xgrammar: unbounded grammar cache causes LLM server DoS

picklescan: bypass allows silent RCE in ML pipelines

picklescan: numpy bypass enables RCE in ML model pipelines

PyTorch: lstm_cell memory corruption, local code exec

PyTorch: memory corruption in RNN sequence unpacking

SageMaker SDK: MD5 collision silently replaces ML workflows

llama-index: DoS via infinite recursion in web reader

langchain-core: file read via prompt template inputs

picklescan: ZIP spoof lets malicious PyTorch models bypass scan

Ray: Redis password exposed via plaintext logging

picklescan: scanner bypass enables supply chain RCE