AI Security Threat Feed

Data Extraction Auth Bypass Framework Agent RAG

LangChain: SSRF in Web Retriever exposes cloud metadata

langchain 2.6K 4 ATLAS

HIGH EXPLOIT AVAIL SCANNER

MLflow: URI fragment LFI exposes arbitrary files

Data Extraction Supply Chain Framework Model Training Data

mlflow CWE-22 624 6 ATLAS

Code Execution Supply Chain Data Leakage Framework Training Data

MLflow: path traversal enables RCE via dataset loading

mlflow 624 5 ATLAS

CRITICAL EXPLOIT AVAIL

pytorch-lightning: RCE via deepdiff Delta deserialization

Code Execution Supply Chain Framework

pytorch_lightning CWE-913 21.9K 5 ATLAS

Data Extraction Data Leakage Framework Inference

Gradio: LFI via JSON path key exposes server files

gradio 679 4 ATLAS

HIGH KEV SCANNER

Gradio: SSRF exposes internal network and cloud metadata

Data Extraction Auth Bypass Framework Inference

gradio 679 4 ATLAS

UNKNOWN EXPLOIT AVAIL

Gradio: secrets exfiltration via unsafe fork PR workflow

CVE-2024-4254

EPSS 0.4%

1y ago

Supply Chain Data Extraction Auth Bypass Framework Model

gradio 679 5 ATLAS

Code Execution Supply Chain Framework Training Data

MLflow: RCE via malicious MLproject file execution

mlflow CWE-94 624 6 ATLAS

Code Execution Supply Chain Framework Training Data

MLflow: RCE via deserialization in crafted Recipes

Code Execution Supply Chain Framework Model

MLflow: RCE via malicious PyTorch model deserialization

mlflow CWE-502 624 4 ATLAS

Supply Chain Code Execution Framework Model Agent

MLflow: RCE via malicious LangChain model deserialization

MLflow: RCE via malicious TensorFlow model deserialization

MLflow: RCE via LightGBM model deserialization

Code Execution Supply Chain Framework Model

MLflow: RCE via pmdarima model deserialization

MLflow: deserialization RCE via malicious PyFunc model

MLflow: RCE via malicious scikit-learn model deserialization

Code Execution Supply Chain Framework Model

MLflow: RCE via malicious scikit-learn model upload