Langflow: IBM Langflow OSS 1.0.0 through 1.11.2 could allow a remote attacker to obtain sensitive…
Affects: Langflow
Advisories
Security advisories for popular AI software, newest first, each linked to its public source.
727 advisories
Langflow: IBM Langflow OSS 1.0.0 through 1.11.2 could allow a remote authenticated attacker to obtain…
Affects: Langflow
Langflow: IBM Langflow OSS 1.0.0 through 1.11.2 could allow a remote authenticated attacker to execute…
Affects: Langflow
Langflow: IBM Langflow OSS 1.0.0 through 1.11.2 allows remote authenticated attackers to bypass…
Affects: Langflow
Langflow: IBM Langflow OSS 1.0.0 through 1.11.2 Langflow could allow an authenticated attacker to write…
Affects: Langflow
Langflow: IBM Langflow OSS 1.0.0 through 1.11.2 suffer from a stored cross-site scripting vulnerability in…
Affects: Langflow
n8n: N8n versions before 2.36.2 contain a missing per-project authorization vulnerability in the…
Affects: n8n
n8n: N8n versions before 2.34.1 contain a server-side request forgery vulnerability in the legacy…
Affects: n8n
n8n: N8n before 1.123.73, 2.35.4, and 2.36.2 contains a credential exposure vulnerability in the…
Affects: n8n
n8n: N8n versions before 1.123.73, 2.35.4, and 2.36.2 pass message content in the Gmail (v1) and…
Affects: n8n
n8n: N8n versions before 1.123.73, 2.35.4, and 2.36.2 contain an expression sandbox escape in the…
Affects: n8n
n8n: N8n versions before 1.123.73, 2.35.4, and 2.36.2 contain a remote code execution vulnerability…
Affects: n8n
n8n: N8n before 2.35.4 and 2.36.x before 2.36.2 contain a query injection vulnerability in the…
Affects: n8n
n8n: N8n before 2.35.4 and 2.36.x before 2.36.2 does not validate credential references in the inline…
Affects: n8n
n8n: N8n versions before 2.36.2 contain an expression sandbox bypass vulnerability where free…
Affects: n8n
llama.cpp: Llama.cpp through commit 97f06e9, when started with the --reranking flag, allows remote…
Affects: llama.cpp
llama.cpp: Llama.cpp b5693 and before has a Reachable Assertion via the gguf_reader::read function
Affects: llama.cpp
llama.cpp: Llama.cpp b5693 and before is vulnerable to Uncontrolled Recursion in…
Affects: llama.cpp
MLflow: MLFLOW_ALLOW_PICKLE_DESERIALIZATION=False safety control bypassed by mlflow.statsmodels flavor…
Affects: MLflow
Hugging Face Transformers: Hugging Face Transformers downloads custom generation code before trust consent
Affects: Hugging Face Transformers
Langflow: IBM Langflow OSS 1.0.0 through 1.11.1 allows an authenticated attacker to execute arbitrary…
Affects: Langflow
Langflow: IBM Langflow OSS 1.0.0 through 1.11.1 could allow a remote authenticated attacker to execute and…
Affects: Langflow
Langflow: IBM Langflow OSS 1.0.0 through 1.11.1 could allow a remote attacker to execute arbitrary code…
Affects: Langflow
Langflow: IBM Langflow OSS 1.0.0 through 1.11.1 could allow a remote attacker to obtain sensitive…
Affects: Langflow
Langflow: IBM Langflow OSS 1.0.0 through 1.11.1 could allow a remote attacker to read arbitrary files due…
Affects: Langflow
Langflow: IBM Langflow OSS 1.0.0 through 1.11.1 could allow a remote attacker to execute arbitrary flows…
Affects: Langflow
Langflow: IBM Langflow OSS 1.0.0 through 1.11.1 could allow a remote authenticated attacker to execute…
Affects: Langflow
Langflow: IBM Langflow OSS 1.0.0 through 1.11.1 is vulnerable to server-side request forgery (SSRF)
Affects: Langflow
vLLM: VLLM up to and including 0.17.0 allows remote attackers to cause a Denial of Service via memory…
Affects: vLLM
LiteLLM: LiteLLM vulnerable to server-side template injection in the /prompts/test endpoint
Affects: LiteLLM
vLLM: VLLM before 0.27.0 fails to properly classify DeepStream as a GPU backend and omits pixel-limit…
Affects: vLLM
n8n: N8n before 2.34.1 and 2.33.x before 2.33.4 contains an SSRF protection bypass in the SearXNG…
Affects: n8n
n8n: N8n before 1.123.69 (and 2.x before 2.33.4 / 2.34.1) contains a code execution vulnerability in…
Affects: n8n
n8n: In versions prior to 1.123.69, 2.33.4, and 2.34.1, the JavaScript Code node's VM sandbox did not…
Affects: n8n
n8n: N8n before 1.123.69, 2.x before 2.33.4, and 2.34.x before 2.34.1 contains a regular expression…
Affects: n8n
n8n: N8n before 1.123.69, 2.x before 2.33.4, and 2.x before 2.34.1 contain an allowed-domains bypass…
Affects: n8n
n8n: N8n before 1.123.69, 2.x before 2.33.4, and 2.34.x before 2.34.1 contain an arbitrary file read…
Affects: n8n
n8n: N8n before 2.34.1 and 2.33.4 contains an authorization bypass in the custom project role…
Affects: n8n
n8n: N8n versions before 1.123.69, 2.33.4, and 2.34.1 contain a JavaScript task runner VM sandbox…
Affects: n8n
n8n: N8n versions before 1.123.69, 2.33.4, and 2.34.1 contain an information disclosure vulnerability…
Affects: n8n
n8n: N8n before 1.123.69, 2.x before 2.33.4, and 2.34.x before 2.34.1 contain an expression injection…
Affects: n8n
n8n: N8n versions before 1.123.69 contain a server-side request forgery vulnerability in the Edit…
Affects: n8n
n8n: N8n versions before 2.34.1 contain a credential validation bypass in the MCP…
Affects: n8n
n8n: N8n before 1.123.69, 2.33.4, and 2.34.1 contains a stored cross-site scripting vulnerability in…
Affects: n8n
n8n: N8n before 1.123.69, 2.33.4, and 2.34.1 contains a PostgREST filter injection vulnerability in…
Affects: n8n
n8n: N8n before 1.123.69, 2.33.4, and 2.34.1 contains a NoSQL injection vulnerability in the MongoDB…
Affects: n8n
n8n: N8n before 1.123.69, 2.33.4, and 2.34.1 contains an SSRF protection bypass in the OAuth2…
Affects: n8n
n8n: N8n before 2.33.4 and 2.34.x before 2.34.1 contain a remote code execution vulnerability in the…
Affects: n8n
Langflow: IBM Langflow OSS 1.0.0 through 1.10.0 could allow a remote attacker to overwrite administrator…
Affects: Langflow
NVIDIA Triton Inference Server: NVIDIA Triton Inference Server for Linux contains a vulnerability where an attacker could cause…
Affects: NVIDIA Triton Inference Server