NVIDIA Triton Inference Server: NVIDIA Triton Inference Server for Linux contains a vulnerability where an attacker could cause…
Affects: NVIDIA Triton Inference Server
Advisories
Security advisories for popular AI software, newest first, each linked to its public source.
727 advisories
NVIDIA Triton Inference Server: NVIDIA Triton Inference Server for Linux contains a vulnerability where an attacker could cause…
Affects: NVIDIA Triton Inference Server
NVIDIA Triton Inference Server: NVIDIA Triton Inference Server for Linux contains a vulnerability where an attacker could cause…
Affects: NVIDIA Triton Inference Server
NVIDIA Triton Inference Server: NVIDIA Triton Inference Server for Linux contains a vulnerability where an attacker could cause…
Affects: NVIDIA Triton Inference Server
MLflow: Unauthenticated full-read SSRF in webhook delivery: _validate_webhook_url bypassed via…
Affects: MLflow
vLLM: SSRF + arbitrary local file read in MiMoV2OmniMultiModalProcessor `_fetch_image` and audio…
Affects: vLLM
vLLM: Derender endpoints decode caller-supplied GenerateResponse token IDs without output bounds
Affects: vLLM
Langflow: IBM Langflow OSS 1.0.0 through 1.9.6 could allow a remote attacker to obtain unauthorized access…
Affects: Langflow
vLLM: Completion prompt lists fan out into unbounded engine requests
Affects: vLLM
vLLM: Cross-User Data Leak Vulnerability
Affects: vLLM
vLLM: Incomplete CVE-2025-62164 remediation can be bypassed by concurrent prompt parts
Affects: vLLM
vLLM: ReDoS via structured_outputs.regex in the lm-format-enforcer backend (no compile timeout)…
Affects: vLLM
vLLM: Unauthenticated Internal Path and Username Disclosure via Validation Error Messages
Affects: vLLM
Flowise: Flowise before 3.1.3 contains an incomplete credential redaction vulnerability in the GET…
Affects: Flowise
Flowise: Flowise before 3.1.4 fails to validate chatflow visibility in the unauthenticated text-to-speech…
Affects: Flowise
Flowise: Flowise before 3.1.3 contains a sandbox escape vulnerability in the vm2 JavaScript sandbox that…
Affects: Flowise
Flowise: Flowise versions before 3.1.3 contain a remote code execution vulnerability in the Custom MCP…
Affects: Flowise
Flowise: Flowise versions before 3.1.3 contain an insecure direct object reference vulnerability in the…
Affects: Flowise
Flowise: Flowise Prompt Injection to RCE and SSRF via CSV/Airtable Agent Python Validator Bypass
Affects: Flowise
Flowise: Flowise before 3.1.3 contains a code injection vulnerability in the CSV Agent node's…
Affects: Flowise
Flowise: Flowise before 3.1.3 contains a code injection vulnerability in the Airtable Agent node that…
Affects: Flowise
Flowise: Flowise before 3.1.3 contains a sandbox escape vulnerability in pythonCodeValidator.ts that…
Affects: Flowise
Flowise: Flowise NodeVM sandbox escape via puppeteer allowlist - authenticated RCE and arbitrary file…
Affects: Flowise
n8n: N8n before 1.123.67, 2.31.5, and 2.32.1 contains a SQL injection vulnerability in the…
Affects: n8n
n8n: N8n before 1.123.67, 2.31.5, and 2.32.1 contains a credential authorization bypass in the HTTP…
Affects: n8n
n8n: N8n before 2.31.5 and 2.32.x before 2.32.1 contain a path-confinement bypass in the…
Affects: n8n
n8n: N8n before 2.32.1 (and before 2.31.5) is vulnerable to account takeover via the Token Exchange…
Affects: n8n
n8n: N8n versions before 2.32.1 fail to enforce the Allowed HTTP Request Domains allowlist in…
Affects: n8n
n8n: N8n versions before 1.123.67 contain a path traversal vulnerability in the Git node's fetch…
Affects: n8n
n8n: N8n before 1.123.67, 2.31.5, and 2.32.1 contains a prototype pollution vulnerability in the VM…
Affects: n8n
n8n: N8n versions before 2.32.1 contain a server-side request forgery protection bypass vulnerability…
Affects: n8n
n8n: N8n before 1.123.67, 2.x before 2.31.5, and 2.32.x before 2.32.1 contain a remote code execution…
Affects: n8n
n8n: N8n before 1.123.67, 2.x before 2.31.5, and 2.32.x before 2.32.1 contain a type confusion…
Affects: n8n
n8n: N8n before 2.31.5 and before 2.32.1 contain a sandbox escape vulnerability in expression…
Affects: n8n
n8n: N8n's JavaScript task runner shared a single module cache across all users' Code-node executions
Affects: n8n
n8n: N8n before 1.123.67, 2.31.5, and 2.32.1 validates credential-access only for a node's top-level…
Affects: n8n
n8n: N8n versions before 1.123.67, 2.31.5, and 2.32.1 contain an arbitrary file write vulnerability…
Affects: n8n
n8n: N8n before 1.123.67, 2.31.5, and 2.32.1 contains a SQL injection vulnerability in the Snowflake…
Affects: n8n
n8n: N8n before 1.123.67, 2.31.5, and 2.32.1 contains a prototype pollution vulnerability in the Edit…
Affects: n8n
Flowise: Flowise versions 2.2.4 through 3.1.4 contain a missing authorization vulnerability in the POST…
Affects: Flowise
Keras: Keras model loading is vulnerable to denial of service through HDF5 shape bombs
Affects: Keras
Flowise: Flowise through 3.1.4 contains a server-side request forgery vulnerability in the SSRF guard…
Affects: Flowise
llama.cpp: Llama.cpp builds b1886 through b7445 contain a race condition use-after-free vulnerability in…
Affects: llama.cpp
llama.cpp: Llama.cpp builds b1886 through b7445 contain a null pointer dereference vulnerability in the…
Affects: llama.cpp
llama.cpp: Llama.cpp builds b1886 through b7445 contain an integer overflow vulnerability in the…
Affects: llama.cpp
Flowise: Flowise through 3.1.4 contains an authentication bypass vulnerability that allows…
Affects: Flowise
Flowise: Flowise through 3.1.4 contains an insecure direct object reference vulnerability in the OpenAI…
Affects: Flowise
Flowise: Flowise through 3.1.4 contains a missing authorization vulnerability that allows authenticated…
Affects: Flowise
llama.cpp: Llama.cpp builds b7492 through the latest b9060 contains a use-after-free vulnerability in…
Affects: llama.cpp
llama.cpp: Llama.cpp builds b7492 through the latest b9060 contains a use-after-free vulnerability in the…
Affects: llama.cpp