llama.cpp: Llama.cpp builds b4882 before b8487 contain an out-of-bounds read vulnerability in the recurrent…
Affects: llama.cpp
Advisories
Security advisories for popular AI software, newest first, each linked to its public source.
727 advisories
llama.cpp: Llama.cpp builds b4882 through b9058 contain a heap buffer overflow vulnerability in the KV…
Affects: llama.cpp
llama.cpp: Llama.cpp builds b3978 through b9058 contain an integer underflow and out-of-bounds read…
Affects: llama.cpp
llama.cpp: Llama.cpp builds b1283 through b9058 contain an integer overflow vulnerability in the…
Affects: llama.cpp
llama.cpp: Llama.cpp builds b1886 through b7445 contain a double free vulnerability in the LLaMA-Android…
Affects: llama.cpp
Langflow: Weak Fernet Key via random.seed()
Affects: Langflow
Langflow: IBM Langflow OSS 1.0.0 through 1.10.3 could allow an authenticated attacker to execute arbitrary…
Affects: Langflow
Langflow: IBM Langflow OSS 1.0.0 through 1.10.3 could allow an authenticated attacker to execute…
Affects: Langflow
Langflow: IBM Langflow OSS 1.0.0 through 1.10.3 contain an authorization bypass vulnerability in the…
Affects: Langflow
Langflow: IBM Langflow OSS 1.0.0 through 1.10.3 could allow a remote attacker to inject arbitrary code on…
Affects: Langflow
Langflow: IBM Langflow OSS 1.0.0 through 1.10.3, 1.0.0 through 1.10.3, 1.0.0 through 1.10.3, and 1.0.0…
Affects: Langflow
Langflow: IBM Langflow OSS 1.0.0 through 1.10.3, 1.0.0 through 1.10.3, 1.0.0 through 1.10.3, 1.0.0 through…
Affects: Langflow
Langflow: IBM Langflow OSS 1.0.0 through 1.10.3 installations allow anyone on the internet to execute…
Affects: Langflow
Langflow: IBM Langflow OSS 1.0.0 through 1.10.3 is vulnerable to Path Traversal in the Knowledge Bases API…
Affects: Langflow
Langflow: IBM Langflow OSS 1.0.0 through 1.10.3 does not properly validate the username field, allowing…
Affects: Langflow
Langflow: IBM Langflow OSS 1.0.0 through 1.10.3 could allow a remote authenticated attacker to execute…
Affects: Langflow
Langflow: IBM Langflow OSS 1.0.0 through 1.10.3 could allow a remote authenticated attacker to execute…
Affects: Langflow
Langflow: IBM Langflow OSS 1.0.0 through 1.10.3, 1.0.0 through 1.10.3, 1.0.0 through 1.10.3, 1.0.0 through…
Affects: Langflow
Langflow: IBM Langflow OSS 1.0.0 through 1.10.3 does not properly validate ownership in the deprecated…
Affects: Langflow
Langflow: IBM Langflow OSS 1.0.0 through 1.10.3, and 1.0.0 through 1.10.3 contains a Server-Side Request…
Affects: Langflow
Langflow: IBM Langflow OSS 1.0.0 through 1.10.3 Langflow could allow server-side request forgery (SSRF)…
Affects: Langflow
Langflow: IBM Langflow OSS 1.0.0 through 1.10.3, 1.0.0 through 1.10.3, 1.0.0 through 1.10.3, 1.0.0 through…
Affects: Langflow
Langflow: IBM Langflow OSS 1.0.0 through 1.10.3 allows authenticated users can exploit a built-in Langflow…
Affects: Langflow
Langflow: IBM Langflow OSS 1.0.0 through 1.10.3 Langflow allows remote authenticated attackers to bypass…
Affects: Langflow
Langflow: IBM Langflow OSS 1.0.0 through 1.10.3 contain an authentication bypass vulnerability in the…
Affects: Langflow
Langflow: IBM Langflow OSS 1.0.0 through 1.10.3 allows users to read arbitrary files from the server…
Affects: Langflow
Langflow: IBM Langflow OSS 1.0.0 through 1.10.3 could allow a remote attacker to execute arbitrary code…
Affects: Langflow
Langflow: IBM Langflow OSS 1.0.0 through 1.10.3 Langflow could allow an authenticated attacker to read…
Affects: Langflow
Langflow: IBM Langflow OSS 1.0.0 through 1.10.3 could allow a remote authenticated attacker to execute…
Affects: Langflow
MLflow: MLflow AI Gateway permits SSRF through an unvalidated api_base
Affects: MLflow
Open WebUI: A folder write-collaborator can permanently delete the owner's chats by deleting a shared…
Affects: Open WebUI
Open WebUI: Any authenticated user can stall a worker via a knowledge-search pattern that backtracks…
Affects: Open WebUI
Open WebUI: Stored XSS via unescaped KaTeX render-error fallback in rendered messages
Affects: Open WebUI
Open WebUI: Tool source code disclosed to read-only users via the tool list and get endpoints
Affects: Open WebUI
Open WebUI: Unapproved accounts can open terminal sessions via a WebSocket auth path missing the role check
Affects: Open WebUI
Open WebUI: Instance-wide stall via automation recurrence rules that force multi-second parsing
Affects: Open WebUI
Open WebUI: Deletion of directories and file embeddings in other knowledge bases via sync cleanup
Affects: Open WebUI
Open WebUI: Cross-user file content disclosure via request-scoped direct model knowledge metadata
Affects: Open WebUI
Open WebUI: DNS Rebinding SSRF Bypass
Affects: Open WebUI
Open WebUI: Same-origin XSS to account takeover via terminal file-preview iframe hardcoding…
Affects: Open WebUI
Open WebUI: Any authenticated user can reach internal services and cloud metadata via NAT64-encoded URLs
Affects: Open WebUI
Open WebUI: Users denied the image-generation permission can still generate images via chat completions
Affects: Open WebUI
Open WebUI: Any authenticated user can cancel another user's chat generation via the chat delete endpoint
Affects: Open WebUI
Open WebUI: Account takeover via OAuth token exchange accepting tokens issued to any client
Affects: Open WebUI
Open WebUI: Any member with write access to a standard channel can edit or delete other members' messages
Affects: Open WebUI
Open WebUI: Client-side SSRF via unrestricted external resource loading in Vega/Vega-Lite chart rendering
Affects: Open WebUI
Open WebUI: SSRF into internal services via unvalidated sub-resource requests in the Playwright web loader
Affects: Open WebUI
Flowise: Unauthenticated OAuth2 token refresh endpoint returns access tokens, enables token theft for any…
Affects: Flowise
Flowise: CSV Agent Prompt Injection Remote Code Execution Vulnerability
Affects: Flowise
Flowise: Broken Access Control in Stripe Subscription Endpoints Allows Cross-Tenant Billing Manipulation
Affects: Flowise