bounties/
21 pages · Updated June 12, 2026
Pages
- Arbitrary file reading via SQL Injection in [intel/neural-compressor](https://github.com/intel/neural-compressor)
- Arbitrary Code Execution on torch.load() Through Pickle Deserialization in pytorch_v1_3
- Arbitrary Code Execution on Inference Through Keras Lambda Layers in hdf5
- Denial of Service (DoS) via Large Character Payload in API Requests in [tensorflow/serving](https://github.com/tensorflow/serving)
- User's session persist after permanently deleting his account in [glpi-project/glpi](https://github.com/glpi-project/glpi)
- Unsafe cloudpickle deserialization in Prefect task runners and bundle deserialization in [prefecthq/prefect](https://github.com/prefecthq/prefect)
- model.weights.h5: h5py.ExternalLink at Group level silently followed during load_model(), bypassing CVE-2025-9905 fix — information disclosure from arbitrary HDF5 files in [keras-team/keras](https://github.com/keras-team/keras)
- Model Format Vulnerability Formbeta
- bounties/a07e3983-7158-4419-af2b-38f1dea01a4f/index.html
- bounties/36c314cf-fd6e-4fb0-b9b0-1b47bcdf0eb0/index.html
- Command Injection via Malicious Model Artifacts in [mlflow/mlflow](https://github.com/mlflow/mlflow)
- Hacktivity
- RAGFlow: Unsafe pickle.loads() in deserialize_b64() Disabled by Default Safety Mechanism in [infiniflow/ragflow](https://github.com/infiniflow/ragflow)
- Programs
- Unbounded Frame Count in video/jpeg Base64 Data URL Processing Leads to OOM DoS in [vllm-project/vllm](https://github.com/vllm-project/vllm)
- Critical Remote Code Execution via Insecure Pickle Deserialization in HuggingFace Transformers in [huggingface/transformers](https://github.com/huggingface/transformers)
- Incomplete Fix for CVE-2024-39705 — Multiple Unsafe Pickle Loading Paths Remain in NLTK in [nltk/nltk](https://github.com/nltk/nltk)
- Blind SSRF on the RSS Feed in [glpi-project/glpi](https://github.com/glpi-project/glpi)
- RAGFlow RPC Server RCE in [infiniflow/ragflow](https://github.com/infiniflow/ragflow)
- This report is not public
- This report is not public