LiteLLM: From version 1.74.2 to before version 1.83.7, two endpoints used to preview an MCP server before…
Affects: LiteLLM
Advisories
Security advisories for popular AI software, newest first, each linked to its public source.
727 advisories
LiteLLM: From version 1.81.16 to before version 1.83.7, a database query used during proxy API key checks…
Affects: LiteLLM
LiteLLM: From version 1.80.5 to before version 1.83.7, the POST /prompts/test endpoint accepted…
Affects: LiteLLM
Keras: Keras vulnerable to DoS via Malicious .keras Model (HDF5 Shape Bomb Causes Petabyte Allocation…
Affects: Keras
Flowise: A vulnerability was detected in FlowiseAI Flowise up to 3.0.12
Affects: Flowise
Flowise: A weakness has been identified in FlowiseAI Flowise up to 3.0.12
Affects: Flowise
Flowise: Bcrypt Password Hash Exposure
Affects: Flowise
Jupyter: Jupyter Server's Authentication Cookies Remain Valid After Password Reset and Server Restart
Affects: Jupyter
Jupyter: Jupyter Server has a CORS Origin Validation Bypass via `re.match()` in `allow_origin_pat`
Affects: Jupyter
Dify: Dify before version 1.14.0 contains an authorization bypass vulnerability that allows…
Affects: Dify
Jupyter: Jupyter Server: Path Traversal via incorrect startswith() root directory check allows access to…
Affects: Jupyter
Jupyter: Jupyter Server has an open redirection vulnerability in `next` query parameter
Affects: Jupyter
n8n: Prior to versions 1.123.32, 2.17.4, and 2.18.1, the fix for GHSA-f3f2-mcxc-pwjx did not cover…
Affects: n8n
n8n: Prior to versions 1.123.32, 2.17.4, and 2.18.1, the MCP OAuth client registration endpoint…
Affects: n8n
n8n: Prior to versions 1.123.32, 2.17.4, and 2.18.1, an unauthenticated attacker could register a…
Affects: n8n
n8n: Prior to versions 1.123.32, 2.17.4, and 2.18.1, an authenticated user with permission to create…
Affects: n8n
n8n: Prior to versions 1.123.32, 2.17.4, and 2.18.1, a flaw in the Oracle Database node's select…
Affects: n8n
n8n: Prior to versions 1.123.32, 2.17.4, and 2.18.1, an authenticated user with permission to create…
Affects: n8n
n8n: Prior to versions 1.123.32, 2.17.4, and 2.18.1, a flaw in the xml2js library used to parse XML…
Affects: n8n
n8n: Prior to versions 1.123.32, 2.17.4, and 2.18.1, the /mcp-oauth/register endpoint accepted OAuth…
Affects: n8n
n8n: Prior to versions 1.123.32, 2.17.4, and 2.18.1, a flaw in the SeaTable node's row:search and…
Affects: n8n
n8n: Prior to versions 1.123.32, 2.17.4, and 2.18.1, the /chat WebSocket endpoint used by the Chat…
Affects: n8n
n8n: Prior to versions 1.123.32, 2.17.4, and 2.18.1, an authenticated user with a valid API key…
Affects: n8n
n8n: Prior to versions 1.123.33 and 2.17.5, the dynamic-node-parameters endpoints did not verify…
Affects: n8n
Dify: Prior to version 1.13.1, using the method POST /api/files/upload, any unauthenticated user can…
Affects: Dify
Ollama: Ollama contains a heap out-of-bounds read vulnerability in the GGUF model loader
Affects: Ollama
Langflow: IBM Langflow OSS 1.0.0 through 1.8.4 could allow any user to supply a flow_id to read…
Affects: Langflow