LiteLLM: BerriAI litellm has SSRF via Unvalidated spec_path URL in MCP OpenAPI Spec Loader
Affects: LiteLLM
Advisories
Security advisories for popular AI software, newest first, each linked to its public source.
727 advisories
LiteLLM: BerriAI litellm has Security Feature Bypass in BannedKeywords and AzureContentSafety Guardrails…
Affects: LiteLLM
LiteLLM: BerriAI litellm: SSO Login Does Not Invalidate Previous UI Session Tokens
Affects: LiteLLM
LiteLLM: SSO Debug Flow Has Improper Authentication
Affects: LiteLLM
LiteLLM: A security vulnerability has been detected in BerriAI litellm up to 1.82.2
Affects: LiteLLM
LiteLLM: MCP Proxy Has Improper Authentication
Affects: LiteLLM
LiteLLM: PROXY_ADMIN database API Key Generator Has Insufficient Session Expiration
Affects: LiteLLM
LiteLLM: M2M JWT Handler Has Improper Authorization
Affects: LiteLLM
LiteLLM: Admin Key Handler Has Improper Authorization
Affects: LiteLLM
vLLM: VLLM versions >= 0.10.2 and < 0.13.0 are missing sparse tensor validation in multimodal…
Affects: vLLM
vLLM: VLLM versions >= 0.6.3 and < 0.9.0 contain multiple regular expression denial of service (ReDoS)…
Affects: vLLM
Flowise: Flowise before 3.0.8 contains a cross-site scripting (XSS) vulnerability caused by insufficient…
Affects: Flowise
Jupyter: JupyterLab: Stored XSS in extension manager through package metadata unsanitized URI protocol
Affects: Jupyter
Open WebUI: Path traversal / SSRF in terminal server proxy via encoded path traversal
Affects: Open WebUI
vLLM: Image EXIF Rotation & PNG tRNS Transparency Not Normalized, Causing Mismatch Between Model Input…
Affects: vLLM
n8n: Wrong OAuth Scope on Evaluation Test Runs Endpoints
Affects: n8n
n8n: Public API Execution Retry Authorization Bypass
Affects: n8n
n8n: Python Code Node AST Validator Bypass
Affects: n8n
n8n: Wrong OAuth Scope On Evaluations Test Run Creation Endpoint
Affects: n8n
Chroma: ChromaDB has a code injection vulnerability
Affects: Chroma
Chroma: All V1 collection-level endpoints in ChromaDB's Python project pass None for the tenant and…
Affects: Chroma
Chroma: ChromaDB's SimpleRBACAuthorizationProvider doesn't check which tenant, database, or collection a…
Affects: Chroma
Chroma: ChromaDB allows any authenticated users to arbitrarily read, write, update, or delete data in…
Affects: Chroma
Langflow: IBM Langflow OSS 1.0.0 through 1.9.1 could allow an authenticated user to read or modify…
Affects: Langflow
Keras: Keras archive extraction utilities allow path traversal and arbitrary file writes
Affects: Keras
vLLM: vLLM is vulnerable to an Out-of-Memory (OOM) Denial of Service (DoS) attack due to unbounded…
Affects: vLLM
Flowise: FlowiseAI: Evaluator create+update mass-assignment allows cross-workspace evaluator takeover
Affects: Flowise
Flowise: FlowiseAI: Evaluation create+update mass-assignment allows cross-workspace evaluation takeover
Affects: Flowise
Flowise: FlowiseAI: DatasetRow create+update mass-assignment allows cross-workspace row takeover
Affects: Flowise
Flowise: FlowiseAI: Dataset create+update mass-assignment allows cross-workspace dataset takeover
Affects: Flowise
Flowise: FlowiseAI: CustomTemplate create+update mass-assignment allows cross-workspace template takeover
Affects: Flowise
Flowise: FlowiseAI: Assistant create+update mass-assignment allows cross-workspace assistant takeover
Affects: Flowise
Flowise: FlowiseAI: Vector Store No Permission Checks
Affects: Flowise
Flowise: FlowiseAI Vulnerable to Credential Data Leak
Affects: Flowise
Flowise: FlowiseAI: Authenticated Host RCE via POST /api/v1/node-custom-function and NodeVM Sandbox…
Affects: Flowise
Flowise: FlowiseAI has Mass Assignment in Assistant Update Endpoint that Allows Cross-Workspace Resource…
Affects: Flowise
Flowise: FlowiseAI Exposes Basic Auth Credentials via API
Affects: Flowise
Flowise: FlowiseAI has Mass Assignment in Chatflow Update Endpoint that Allows Cross-Workspace AgentFlow…
Affects: Flowise
Flowise: FlowiseAI has Mass Assignment in Tool Update Endpoint that Allows Cross-Workspace Resource…
Affects: Flowise
Flowise: FlowiseAI has Mass Assignment in Variable Update Endpoint that Allows Cross-Workspace Resource…
Affects: Flowise
Weaviate: Weaviate has an Improper Authorization issue
Affects: Weaviate
Milvus: RBAC grantee-id uses truncated MD5 (64-bit), enabling privilege-binding collisions and…
Affects: Milvus
Streamlit: Streamlit @st.cache_data hash collision via fixed sampling seed and PIL P-mode palette omission
Affects: Streamlit
MLflow: Deterministic sampling in dataset digest enables predictable collisions
Affects: MLflow
Gradio: Audio cache key ignores metadata when saving numpy audio outputs
Affects: Gradio
Hugging Face Transformers: huggingface/transformers: Arbitrary Code Execution During Model Initialization in the LightGlue…
Affects: Hugging Face Transformers
MLflow: Environment variable injection in AI Gateway secrets enables server-side credential exfiltration
Affects: MLflow
MLflow: Any authenticated user can enumerate all gateway secrets, endpoints, and model definitions
Affects: MLflow
AnythingLLM: Prior to 1.13.0, the filesystem-search-files agent skill passes its LLM-controlled pattern…
Affects: AnythingLLM
AnythingLLM: Prior to 1.13.0, an approved mobile device token created in single-user mode can survive…
Affects: AnythingLLM