AI Security Threat Feed

DoS Supply Chain Framework Inference

PyTorch: integer overflow in rot90+randn_like causes DoS

pytorch CWE-190 21.9K 3 ATLAS

PyTorch: DoS in linalg.lu via malformed slice op

DoS Framework Inference

Data Extraction Privacy Violation Framework Inference Training Data

PyTorch: Dropout inconsistency enables membership inference

pytorch 21.9K 3 ATLAS

Supply Chain DoS Framework Training Data Inference

PyTorch: OOB write causes incorrect bitwise shift results

pytorch 21.9K 3 ATLAS

Adversarial Examples Supply Chain Framework Inference Model

PyTorch: torch.compile silent output inconsistency

DoS Data Leakage Supply Chain Framework Inference

PyTorch: reachable assertion in nn.Fold with inductor

Adversarial Examples Auth Bypass Framework Inference

PyTorch: PairwiseDistance silent miscalculation, integrity risk

DoS Framework Training Data

Transformers: ReDoS in optimizer halts training pipelines

transformers CWE-400 7.9K 4 ATLAS

UNKNOWN EXPLOIT AVAIL

OpenAI Codex CLI: sandbox escape via model-generated cwd

CVE-2025-59532

EPSS 0.1%

7mo ago

Code Execution Supply Chain Prompt Injection Agent

5 ATLAS

CRITICAL EXPLOIT AVAIL

Flowise: Unauthenticated RCE via MCP config injection

Code Execution Supply Chain Agent Framework Plugin

flowise 5 ATLAS

Data Extraction Privacy Violation Agent Framework

Flowise: unauthenticated SSRF exposes internal network

flowise 4 ATLAS

CRITICAL EXPLOIT AVAIL

Flowise Cloud: cross-tenant env var exposure leaks API keys

Data Extraction Auth Bypass Privacy Violation Framework API Agent

6 ATLAS

Code Execution Supply Chain Framework Model

Keras: safe_mode bypass enables RCE via model load

keras CWE-502 1.5K 6 ATLAS

Code Execution Supply Chain Framework Model

Keras: safe_mode bypass enables RCE via .h5 model files

keras CWE-913 1.5K 5 ATLAS

Supply Chain Code Execution Model Framework

picklescan: file extension bypass allows model RCE

picklescan CWE-20 3 5 ATLAS

Social Engineering Data Extraction Framework Agent

n8n: stored XSS in LangChain chat trigger (public)

n8n 16 5 ATLAS

MEDIUM EXPLOIT AVAIL

Transformers: ReDoS in EnglishNormalizer exhausts CPU

DoS Framework Inference

transformers CWE-1333 7.9K 4 ATLAS

CRITICAL EXPLOIT AVAIL SCANNER

Flowise: auth bypass in reset flow allows full ATO

Auth Bypass Data Extraction Agent Framework

flowise 5 ATLAS

CRITICAL EXPLOIT AVAIL

langchaingo: Jinja2 SSTI allows host filesystem read

Code Execution Data Extraction Framework Agent

5 ATLAS