AI Security Threat Feed

Code Execution Supply Chain Data Extraction Framework Training Data

jupyter_core: config hijack enables cross-user code exec

CWE-427 4 ATLAS

DoS Inference API Framework

vLLM: input validation DoS crashes inference worker

vllm CWE-20 127 3 ATLAS

vLLM: ReDoS crashes inference server via malformed regex

DoS Inference Framework

vllm CWE-248 127 4 ATLAS

vLLM: DoS via malformed JSON schema guided param

vllm CWE-248 127 3 ATLAS

DoS Inference API Framework

vLLM: ReDoS in tool parser causes service outage

vllm CWE-1333 127 3 ATLAS

gradio CWE-434 679 3 ATLAS

Gradio: unauthenticated file copy enables disk DoS

DoS Framework Inference

Data Leakage Privacy Violation Inference Framework

vLLM: image hash collision enables multimodal cache leakage

vllm CWE-1023 127 4 ATLAS

LOW

vLLM: timing side-channel leaks prompt cache data

Privacy Violation Data Extraction Inference Framework

vllm CWE-203 127 4 ATLAS

LOW EXPLOIT AVAIL

Gradio: CORS origin bypass in ML UI handler

Auth Bypass Framework Inference

gradio CWE-345 679 3 ATLAS

MEDIUM

vllm: ReDoS in inference endpoints enables DoS

GHSA-j828-28rj-hfhp

4.3

11mo ago

DoS Inference Framework

vllm Patch: 0.9.0 CWE-1333 127 3 ATLAS

Code Execution Supply Chain Framework Agent

llama-index-cli: OS command injection enables RCE

llama-index CWE-78 229 4 ATLAS

Supply Chain Code Execution Framework Model

label-studio-ml: PyTorch .pt deserialization RCE in YOLO loader

label-studio-ml CWE-502 1 4 ATLAS

CRITICAL EXPLOIT AVAIL

vLLM: RCE via exposed TCPStore in distributed inference

Code Execution Data Extraction Inference Framework

vllm CWE-502 127 4 ATLAS

transformers CWE-1333 7.9K 3 ATLAS

transformers: ReDoS in testing_utils causes DoS

UNKNOWN EXPLOIT AVAIL

Ollama: DoS via malicious manifest in /api/pull

Label Studio: XSS enables unauthorized actions via CSRF

CVE-2025-47783

EPSS 0.2%

12mo ago

Code Execution Data Leakage Social Engineering Framework Training Data

label-studio Patch: 1.18.0 CWE-79 1 5 ATLAS

llama-index Patch: 0.12.21 CWE-400 229 3 ATLAS

llama_index: DoS via uncapped recursion in web reader

DoS Inference API Framework

TensorFlow Serving: JSON recursion DoS on inference API

tensorflow_serving CWE-787 3.7K 3 ATLAS