To follow new advisories, add an RSS feed for each AI product you use to a feed reader. Securaity has no newsletter and no email alerts. RSS is the only way to be told when something new appears. The steps below take about half an hour, and after that the advisories come to you.
What RSS is and why we use it
An RSS feed is a standard web format. Feed reader apps check feeds for new items and show you what has changed. There are many feed readers, including apps for phones and computers, and some email programs can read feeds too. Any of them will work with our feeds.
Each item in a Securaity feed is one advisory. It has three parts:
- the advisory’s title
- a link to the advisory page
- the day Securaity published it
We check advisories daily, so a new item can show up on any day of the week.
Two kinds of feed
You can follow everything, or only the products you run.
- Site-wide feed:
securaity.org/feed.xmllists the 50 newest advisories across all 30 products we track, newest first. It suits someone whose job is to watch the whole field. - Product feeds:
securaity.org/vulnerabilities/<product>/feed.xmllists the 50 newest advisories for one product. For example, the Ollama feed issecuraity.org/vulnerabilities/ollama/feed.xml.
Most small organizations should use product feeds. You will see only the advisories that apply to you, and fewer items means people actually read them.
Step by step
-
List the AI software your organization runs. Ask your IT provider or the developers who support you. Include tools running on a server, on staff laptops and inside other projects. For example, a chatbot built on LangChain that stores documents in Chroma means you need both. Write the list down.
-
Find each product under /vulnerabilities/. Every tracked product has its own page, such as /vulnerabilities/ollama/. The page lists that product’s advisories, newest first. If a tool on your list is not there, we do not track it, and you will need another way to follow it. The full list and our reasons for choosing it are in the 30 AI products we track.
-
Copy the feed link. On each product page, find the link labeled “RSS feed for” followed by the product name. Copy that link. You can also build the address from the table below.
-
Add it to a feed reader. Open your reader, choose the option to add or subscribe to a feed, and paste the link. Do this once for each product on your list. If several people need the same feeds, put them in one shared reader or have each person add them.
-
Decide who reads the feed and how often. Choose one person, and a backup for when that person is away. A simple rule that works for many small teams: check the feed once a week, but read any Critical or High item the same day it appears. Put the weekly check on a calendar so it actually happens.
-
Act when an item appears. Open the advisory and check which versions are affected. Compare those versions with what you run. If you are affected, pass the advisory to whoever runs the software and agree on when it will be fixed. For Critical and High advisories, the advisory page has a “Who is affected” section and a “What to do” section once its analysis is written. If those sections are not there yet, check the page again later.
Feed addresses for every tracked product
Each address follows the same pattern. Replace the slug in securaity.org/vulnerabilities/<product>/feed.xml with the one below.
| Product | Slug |
|---|---|
| AnythingLLM | anythingllm |
| Chroma | chroma |
| ComfyUI | comfyui |
| Dify | dify |
| Flowise | flowise |
| Gradio | gradio |
| Hugging Face Transformers | transformers |
| Jupyter | jupyter |
| Keras | keras |
| LangChain | langchain |
| Langflow | langflow |
| LiteLLM | litellm |
| llama.cpp | llama-cpp |
| LlamaIndex | llamaindex |
| LM Studio | lm-studio |
| Milvus | milvus |
| MLflow | mlflow |
| n8n | n8n |
| NVIDIA Triton Inference Server | triton-inference-server |
| Ollama | ollama |
| ONNX Runtime | onnx-runtime |
| Open WebUI | open-webui |
| PyTorch | pytorch |
| Qdrant | qdrant |
| Ray | ray |
| Streamlit | streamlit |
| TensorFlow | tensorflow |
| text-generation-webui | text-generation-webui |
| vLLM | vllm |
| Weaviate | weaviate |
For example, the feed for Open WebUI is securaity.org/vulnerabilities/open-webui/feed.xml.
If you want everything
Add securaity.org/feed.xml instead of, or alongside, the product feeds. It covers all 30 products in one stream, so expect many items that do not apply to you. It works best for IT staff or developers who support several organizations, or who want to see how the field is changing. Anyone who is only protecting their own setup will usually be better served by product feeds. You can also browse every advisory at /advisories/ without a reader.
Keep the list current
Your feeds are only as good as your list of software. When your organization starts using a new AI tool, add its feed the same week. When you stop using one, remove its feed so the reader stays easy to scan. Review the list with your IT provider or developers every few months, because tools often get added inside projects without anyone mentioning it.
Published Updated