AI Vulnerabilities by Vendor

Browse AI/ML vulnerabilities by the vendor that ships them. AI Threat Alert tracks 1,793 CVEs across 226 vendors — foundation-model providers, framework maintainers, and AI tooling companies including OpenAI, Anthropic, Google, Meta, Microsoft, and Hugging Face — with 240 critical issues, so you can see which vendors carry the most AI security exposure.

VendorCVEsCritical
google43217
OpenClaw23814
n8n7216
Red Hat552
open-webui510
lfprojects4910
n/a487
gradio_project477
n8n-io430
langchain3520
flowiseai339
linuxfoundation314
huggingface313
vllm317
openclaw293
Flowise239
ollama201
MervinPraison190
langflow197
sooperset182
FlowiseAI185
opensuse164
IBM144
picklescan147
siyuan-note122
mistralai116
BerriAI90
vllm-project91
opengeos99
Insyde Software80
Unknown70
keras72
quantumcloud70
oracle77
filamentphp60
llamaindex61
binary-husky61
GNOME60
Eliz Software55
Edimax50
bentoml53
craftcms50
PraisonAI50
anthropics51
litellm51
Apache Software Foundation40
OpenAI41
hiyouga42
laurent2240
onnx40
pydantic40
pytorch42
gaizhenbiao31
lightningai32
scikit-learn31
mmaitre31431
Anthropic30
mlflow31
givanz30
HumanSignal30
chatchat-space31
aaPanel31
h2o30
zephyrproject30
snowflake30
openairinterface30
Feast21
databufflabs22
ash-project20
taxopress20
lin-snow20
tugcantopaloglu21
Microsoft20
Splunk20
leejet20
Headroom Labs21
langchain-ai20
kvcache-ai22
keras-team20
DataDog20
jupyterlab20
intel20
Google20
Project-MONAI20
Google Cloud22
LXware20
ml-explore21
parisneo20
QR Menu Pro Smart Menu Systems20
Chainlit20
pinpoint-apm20
Elastic20
microsoft21
InternLM21
AUTOMATIC111120
marimo-team20
snorkel20
lollms20
mintplexlabs10
nltk10
onyx-dot-app10
openai10
openwebui10
pgadmin.org11
readest10
shopperlabs10
sillytavern10
sourcentis10
sugarforever10
suyogs10
thechangelog10
themegrill10
typebot10
uapp10
unslothai10
usmannasir10
vasiliskerasiotis11
vercel10
vnotex10
webdigit10
wolfSSL10
x-d_lab11
xdg10
yashbhalgat10
yushine10
zanllp10
zephyrproject-rtos10
ztxz1610
exo-explore10
BSS Software11
BitterSecurity11
Budibase10
CrewAI10
DAMO Academy10
DrayTek Corporation11
EspoCRM10
F510
FFmpeg10
Flux15911
ForceInjection10
FreeBSD10
FreeRDP10
GST Electronics11
Grafana10
HKUDS10
Karel10
Lightning-AI10
LlamaChinese10
Merkulove10
Merkur Software11
Microweber10
Mindee10
NTN Information Processing Services Computer Software Hardware Industry and Trade Ltd. Co.11
NVIDIA10
Notepad++10
NousResearch10
OISF10
OW210
Ollama AI10
OpenSSL10
OpenSignLabs10
OpenSolution10
Oracle Corporation11
PDFMathTranslate10
PRVTPRO10
PickleScan10
QQBot10
QuantumCloud10
RooCodeInc10
Siemens10
Siemens AG10
Snowflake10
Sony10
Teknolojik Center Telecommunication Industry Trade Co. Ltd.10
Tenstorrent10
The-40-Thieves10
Thecus10
Vesta11
WebPros10
aeon10
agentjido10
agpt10
aliasrobotics11
allegroai10
amazon10
anthropic10
astoundify10
astral-sh10
atxp10
ays-pro10
bylancer11
chetans910
chuanhuchatgpt_project10
com.datadoghq10
combust11
crewai10
cthackers10
data-infra10
dataease10
davila710
dtwang10
espnet10
A-J-Evolution10
ffmpeg10
getformwork10
getgrav11
ggml-org10
gradio10
h2oai11
hestiacp10
hliu10
humansignal10
increments10
jsbroks10
k2-fsa10
kedro-org10
kishan072510
langflow-ai10
langgenius10
lobehub10
ludwig-ai10
mapster10
matrixaddons10
mauriceboe10
mcp-tool-shop-org11
mindsdb10

Frequently asked questions

Which AI vendors does AI Threat Alert track?

AI Threat Alert tracks 226 vendors that publish AI/ML models, frameworks, or tooling — including OpenAI, Anthropic, Google, Meta, Microsoft, and Hugging Face — ranked by the number of CVEs affecting their products.

How many AI vendor vulnerabilities are tracked?

1,793 AI/ML CVEs across 226 vendors, of which 240 are rated critical.

How are vendors ranked?

Vendors are ranked by total CVE count, with critical-severity issues highlighted, so the vendors with the largest AI security exposure surface first.

What counts as an AI vendor here?

Any organization whose AI/ML models, frameworks, libraries, or tools have tracked vulnerabilities — from foundation-model providers to open-source framework maintainers.

Where does the vendor CVE data come from?

Vendor vulnerability data is sourced from NVD and GitHub Advisory, then mapped to the specific AI/ML packages each vendor maintains.