AI Security Threat Feed

fickling: Protection Bypass circumvents security controls

GHSA-wccx-j62j-r448

Code Execution Supply Chain Auth Bypass Framework Model Inference

fickling Patch: 0.1.9 CWE-693 57 5 ATLAS

picklescan: Allowlist Bypass evades input filtering

GHSA-g38g-8gr9-h9xp

9.8

Supply Chain Code Execution Framework Model

picklescan Patch: 1.0.4 CWE-184 3 7 ATLAS 1 incident

picklescan: security flaw enables exploitation

GHSA-vvpj-8cmc-gx39

10.0

Supply Chain Code Execution Auth Bypass Model Framework

picklescan Patch: 1.0.4 CWE-183 3 8 ATLAS

picklescan: Allowlist Bypass evades input filtering

GHSA-7wx9-6375-f5wh

9.8

Supply Chain Code Execution Framework

picklescan Patch: 1.0.4 CWE-184 3 5 ATLAS

Code Execution Supply Chain Framework Agent

langgraph-checkpoint: Deserialization enables RCE

langgraph-checkpoint Patch: 4.0.0 CWE-502 3.1K 4 ATLAS

fickling: Allowlist Bypass evades input filtering

GHSA-mhc9-48gj-9gp3

Supply Chain Code Execution Framework Model

fickling Patch: 0.1.8 CWE-184 57 7 ATLAS

fickling: security flaw enables exploitation

GHSA-mxhj-88fx-4pcv

Supply Chain Code Execution Auth Bypass Framework Model

fickling Patch: 0.1.8 CWE-436 57 6 ATLAS

Model Poisoning Code Execution Auth Bypass Framework RAG Model

mlflow: security flaw enables exploitation

mlflow Patch: 3.8.0rc0 CWE-1393 624 10 ATLAS

Data Extraction Model Poisoning Code Execution Framework RAG Model

mlflow: Path Traversal enables file access

mlflow Patch: 3.8.0rc0 CWE-22 624 11 ATLAS

MEDIUM EXPLOIT AVAIL

ray: Missing Auth allows unauthenticated access

Auth Bypass DoS Framework Inference

ray Patch: 2.54.0 CWE-306 845 4 ATLAS

LOW

fickling: Allowlist Bypass evades input filtering

GHSA-83pf-v6qq-pwmr

Supply Chain Code Execution Data Extraction Framework Model Training Data

fickling Patch: 0.1.8 CWE-184 57 6 ATLAS

Code Execution Supply Chain Auth Bypass Framework Agent RAG

semantic-kernel: Code Injection enables RCE

semantic-kernel Patch: 1.39.4 CWE-94 17 5 ATLAS

picklescan: Allowlist Bypass evades input filtering

GHSA-97f8-7cmv-76j2

Code Execution Supply Chain Model Framework

picklescan Patch: 1.0.3 CWE-184 3 7 ATLAS

Code Execution Supply Chain Data Extraction Framework Agent Plugin

semantic-kernel: Path Traversal enables file access

semantic-kernel Patch: 1.39.3 CWE-22 17 6 ATLAS

HIGH EXPLOIT AVAIL

pydantic-ai: SSRF allows internal network access

Data Extraction Auth Bypass Framework Agent API

pydantic-ai-slim Patch: 1.56.0 CWE-918 414 6 ATLAS

Code Execution Data Extraction Framework Agent

pydantic-ai: Path Traversal enables file access

pydantic-ai-slim Patch: 1.51.0 CWE-22 414 5 ATLAS

Code Execution Data Extraction Supply Chain Framework Training Data

sagemaker: security flaw enables exploitation

sagemaker Patch: 3.2.0 CWE-201 51 8 ATLAS

Supply Chain Code Execution Inference Framework

sagemaker: security flaw enables exploitation

sagemaker Patch: 3.1.1 CWE-295 51 5 ATLAS

Supply Chain DoS Code Execution Framework Model Training Data

picklescan: Deserialization enables RCE

GHSA-m7j5-r2p5-c39r

3mo ago

picklescan Patch: 1.0.1 CWE-502 3 4 ATLAS