Python code when loaded, bypassing Picklescan's safety checks and enabling supply-chain poisoning of shared model files

Picklescan is vulnerable to RCE via missing detection when calling

llama-index-core insecurely handles temporary files

Open WebUI's process_files_batch() endpoint missing ownership check

Open WebUI Vulnerable to IDOR: Retrieval API Bypasses Knowledge Base

Open WebUI: Redis Cache Keys tool_servers and terminal_servers

simple-git allows command execution through unblocked Git configuration includes

mcp-shell — Security Disabled by Default in Bare-Binary Deploy

CodeWhale: image_analyze follows workspace symlinks, leaking external file bytes

vLLM is an inference and serving engine for large language