AI Security Threat Feed

MONAI does not prevent path traversal, potentially leading to arbitrary file writes

The langchain-ai/langchain project, specifically the EverNoteLoader component, is vulnerable to XML External Entity (XXE) attacks due to insecure XML parsing. The affected version is 0.3.63. The...

LlamaIndex affected by a Denial of Service (DOS) in JSONReader

XGrammar affected by Denial of Service by infinite recursion grammars

vLLM has remote code execution vulnerability in the tool call parser for Qwen3-Coder

Picklescan has pickle parsing logic flaw that leads to malicious pickle file bypass

ExecuTorch vulnerable to Heap-based Buffer Overflow attack

LlamaIndex vulnerable to Path Traversal attack through its encode_image function

label-studio vulnerable to Cross-Site Scripting (Reflected) via the label_config parameter.

LlamaIndex Vulnerable to Denial of Service (DoS)

LLama Factory enables fine-tuning of large language models. Prior to version 1.0.0, a critical vulnerability exists in the `llamafy_baichuan2.py` script of the LLaMA-Factory project. The script...

Picklescan Vulnerable to Exfiltration via DNS via linecache and ssl.get_server_certificate

LiteLLM Has an Improper Authorization Vulnerability

LiteLLM Reveals Portion of API Key via a Logging File

LiteLLM Vulnerable to Denial of Service (DoS) via Crafted HTTP Request

Open WebUI allows Remote Code Execution via Arbitrary File Upload to /audio/api/v1/transcriptions

Open Neural Network Exchange (ONNX) Path Traversal Vulnerability

Open WebUI Cross-Site Request Forgery (CSRF) Vulnerability

Open WebUI Unauthenticated Multipart Boundary Denial of Service (DoS) Vulnerability in api/chat/file

LoLLMS Code Injection vulnerability

A vulnerability in BerriAI/litellm, as of commit 26c03c9, allows unauthenticated users to cause a Denial of Service (DoS) by exploiting the use of ast.literal_eval to parse user input. This function...

Label Studio allows Server-Side Request Forgery in the S3 Storage Endpoint

onnx allows Arbitrary File Overwrite in download_model_with_test_data

Jupyter Notebook file bypasses sanitization, executes JavaScript