Langflow: Prompt injection in Langflow Smart Transform can lead to code execution
Affects: Langflow
Advisories
Security advisories for popular AI software, newest first, each linked to its public source.
727 advisories
Jupyter: JupyterLab: Cross-site scripting (XSS) in JupyterLab via crafted language package…
Affects: Jupyter
Jupyter: JupyterLab: Argument injection in JupyterLab extension uninstall exposes server-readable files…
Affects: Jupyter
Jupyter: JupyterLab: Cross-site scripting (XSS) in JupyterLab via notebook cells pasted from the system…
Affects: Jupyter
LiteLLM: Authenticated SSRF and provider-credential exfiltration via unvalidated request-body routing…
Affects: LiteLLM
vLLM: A flaw has been found in vllm-project vLLM up to 0.26.0
Affects: vLLM
vLLM: VLLM before 0.29.0 accepts user-controlled stop_token_ids on the OpenAI-compatible POST…
Affects: vLLM
vLLM: In versions from 0.22.1 through 0.28.0, the operator-supplied model revision pin (--revision /…
Affects: vLLM
vLLM: VLLM versions 0.22.0 through 0.23.0 fail to validate stop_token_ids against vocabulary bounds in…
Affects: vLLM
vLLM: VLLM before 0.29.0 fails to enforce decoder prompt-length validation on the disaggregated…
Affects: vLLM
vLLM: VLLM through 0.29.0 fetches and fully materializes remote or inline media before enforcing its…
Affects: vLLM
vLLM: VLLM before 0.29.0 contains a resource-limit bypass vulnerability in PyNvVideoCodec decoder…
Affects: vLLM
vLLM: Vllm before 0.29.0 fails to enforce VLLM_MAX_AUDIO_CLIP_FILESIZE_MB limit in multimodal chat…
Affects: vLLM
vLLM: VLLM versions before 0.29.0 contain a denial-of-service vulnerability in the cache_salt…
Affects: vLLM
vLLM: VLLM Mooncake connector through 0.29.0 fails to properly manage GPU KV cache block ownership…
Affects: vLLM
vLLM: VLLM through 0.29.0 fails to validate the tp_size parameter in kv_transfer_params on…
Affects: vLLM
vLLM: VLLM through 0.29.0 contains a resource exhaustion vulnerability in MooncakeConnector where…
Affects: vLLM
vLLM: vllm p2p never connected zmq_exhaustion
Affects: vLLM
vLLM: VLLM through 0.29.0 contains a denial of service vulnerability in the NIXL connector's prefix…
Affects: vLLM
vLLM: VLLM versions through 0.29.0 contain a denial of service vulnerability in the NIXL connector's…
Affects: vLLM
vLLM: VLLM through 0.29.0 fails to properly validate bad_words token indices against the model's…
Affects: vLLM
vLLM: VLLM through 0.29.0 contains a memory corruption vulnerability in the Triton _bincount_kernel…
Affects: vLLM
vLLM: VLLM before 0.29.0 validates allowed_token_ids against tokenizer length instead of model output…
Affects: vLLM
vLLM: VLLM versions before 0.28.0 fail to validate the lower bound of token IDs in the /v1/embeddings…
Affects: vLLM
vLLM: VLLM through 0.29.0 fails to properly clean up decode-side metadata for rejected inference…
Affects: vLLM
LiteLLM: LiteLLM Proxy has server-side request forgery via the `user_config` request parameter
Affects: LiteLLM
vLLM: Request-selected PyNvVideoCodec GPU decode bypasses static VRAM reservation
Affects: vLLM
vLLM: Unauthenticated audio decompression-bomb DoS in /v1/chat/completions
Affects: vLLM
Flowise: A vulnerability was found in FlowiseAI Flowise up to 3.0.2
Affects: Flowise
vLLM: VLLM versions before 0.28.0 fail to validate audio sample rate headers in the transcription…
Affects: vLLM
vLLM: VLLM versions >=0.10.2 and <0.28.0 do not apply any audio decode-size or duration limit when…
Affects: vLLM
vLLM: VLLM before 0.28.0 contains a remote code execution vulnerability in the LlavaOnevision2…
Affects: vLLM
Flowise: Flowise versions before 3.1.4 contain an unauthenticated denial of service vulnerability in the…
Affects: Flowise
Flowise: In versions up to and including 3.1.3, the POST /api/v1/node-load-method/:name endpoint is…
Affects: Flowise
Flowise: Flowise before 3.1.4 contains a broken access control vulnerability in GET…
Affects: Flowise
Langflow: IBM Langflow OSS 1.0.0 through 1.10.3 could allow a remote authenticated attacker to execute…
Affects: Langflow
Langflow: IBM Langflow OSS 1.0.0 through 1.11.5 allows an authenticated non-administrative user could…
Affects: Langflow
Langflow: IBM Langflow OSS 1.0.0 through 1.11.5 could allow a remote authenticated attacker to execute…
Affects: Langflow
Langflow: IBM Langflow OSS 1.0.0 through 1.11.5 could allow a remote authenticated attacker to execute…
Affects: Langflow
Langflow: IBM Langflow OSS 1.0.0 through 1.11.5
Affects: Langflow
Langflow: IBM Langflow OSS 1.0.0 through 1.11.5 could allow a remote attacker to obtain sensitive…
Affects: Langflow
Langflow: IBM Langflow OSS 1.0.0 through 1.11.5 could allow a remote authenticated attacker to execute…
Affects: Langflow
Langflow: IBM Langflow OSS 1.0.0 through 1.11.5 could allow a remote attacker to execute arbitrary code…
Affects: Langflow
Langflow: IBM Langflow OSS 1.0.0 through 1.11.5 could allow a remote authenticated attacker to execute…
Affects: Langflow
Langflow: IBM Langflow OSS 1.0.0 through 1.11.5 could allow a remote authenticated attacker to read…
Affects: Langflow
Langflow: IBM Langflow OSS 1.0.0 through 1.11.5 could allow a remote attacker to execute arbitrary OS…
Affects: Langflow
Langflow: IBM Langflow OSS 1.0.0 through 1.11.5 could allow a remote authenticated attacker to obtain…
Affects: Langflow
Langflow: IBM Langflow OSS 1.0.0 through 1.11.5 could allow a remote authenticated attacker to execute…
Affects: Langflow
Langflow: IBM Langflow OSS 1.0.0 through 1.11.5 could allow a remote authenticated attacker to execute…
Affects: Langflow
Langflow: IBM Langflow OSS 1.0.0 through 1.11.5 could allow an authenticated attacker to execute arbitrary…
Affects: Langflow