intended model, as it will open a different model each time. Additionally, an attacker can exploit this vulnerability to perform data model poisoning by creating a model with the same

vulnerability in `nltk.downloader` in nltk/nltk versions <= 3.9.4 allows for cross-package resource and model poisoning. The downloader extracts package archives into shared namespaces such as `corpora/` and `taggers/` instead

A vulnerability in keras-team/keras versions <= 3.15.0 allows for

Picklescan is vulnerable to RCE through missing detection when calling

CKAN MCP Server: Cache-key canonicalization collision enables cache confusion

Open WebUI Vulnerable to Unauthenticated RAG Configuration Disclosure

vLLM: Scale-out disaggregated multimodal transport trusts caller-supplied features

ViewComponent: Reused Component Instances Retain Stale Render Context