AI Threat AlertHumansignal
AI Threat Alert tracks 4 known AI/ML vulnerabilities affecting Humansignal products — each enriched with CVSS severity, EPSS exploit probability, patch status, and CISO-grade analysis. Browse every Humansignal CVE below, sorted by severity and recency.
| Severity | CVE | Headline | Package | CVSS |
|---|---|---|---|---|
| HIGH | CVE-2025-5173 | label-studio-ml: PyTorch .pt deserialization RCE in YOLO loader | label-studio-ml | 7.8 |
| HIGH | CVE-2026-76073 | Label Studio: IDOR exposes cross-org annotations | label-studio | 8.8 |
| HIGH | CVE-2026-85179 | Label Studio: SSRF via webhooks hits cloud metadata | label-studio | 8.5 |
| HIGH | CVE-2026-85211 | Label Studio: org filter bypass leaks tenant storage | label-studio | 7.7 |
Frequently asked questions
How many known vulnerabilities affect Humansignal?
4 AI/ML CVEs affecting Humansignal products are tracked, sourced from NVD and GitHub Advisory.
What Humansignal products are affected?
The CVEs below map to the Humansignal AI/ML packages and tools tracked by AI Threat Alert; open any CVE to see the affected components and versions.
Where does the Humansignal vulnerability data come from?
Data is sourced from NVD and GitHub Advisory, then enriched with CVSS severity, EPSS exploit probability, and patch status for each CVE.
How can I monitor Humansignal for new vulnerabilities?
AI Threat Alert tracks Humansignal continuously; a Pro subscription adds breaking alerts when new CVEs affecting Humansignal are published.
How do I assess Humansignal's security exposure?
Each CVE below carries CVSS severity and exploitation signals, so you can review the highest-severity Humansignal issues first and judge the exposure for your stack.