Path Traversal in Keras Archive Extraction via CWD Validation Bypass Leading to...
Jun 11th 2026
kimkou2024 in keras-team/keras•Python•
High
•$900
High
•Python•$900• CVE-2026-11816
CVE-2026-11816 |
Unbounded Frame Count in video/jpeg Base64 Data URL Processing Leads to OOM DoS
Jun 11th 2026
seory0 in vllm-project/vllm•Python•
High
High
•Python• CVE-2026-5497
CVE-2026-5497 |
model.weights.h5: h5py.ExternalLink at Group level silently followed during load...
Jun 10th 2026
lemonkiil in keras-team/keras•Python•
Medium
•$125
Medium
•Python•$125• CVE-2026-9337
CVE-2026-9337 |
Unsafe cloudpickle deserialization in Prefect task runners and bundle deserializ...
Jun 5th 2026
etwithin in prefecthq/prefect•Python•
None
None
•Python |
CWE-346: CORS Origin Validation Bypass via `re.match()` in `allow_origin_pat`
Jun 3rd 2026
vnykmshr in jupyter/jupyter•Python•
Medium
•$100
Medium
•Python•$100• CVE-2026-6657
CVE-2026-6657 |
`trust_remote_code=False` Bypass in LightGlue Nested Config Resolution (Transfor...
Jun 3rd 2026
dev-mhyun in huggingface/transformers•Python•
High
•$750
High
•Python•$750• CVE-2026-5241
CVE-2026-5241 |
AI Gateway secret API accepts `$ENV_VAR` references and can be remotely abused t...
Jun 3rd 2026
sinon2003 in mlflow/mlflow•Python•
Critical
•$2700
Critical
•Python•$2700• CVE-2026-4035
CVE-2026-4035 |
Path Traversal via Incorrect startswith() Root Directory Check in jupyter-server...
Jun 2nd 2026
galanzi2580-wq in jupyter/jupyter•Python•
Medium
•$100
Medium
•Python•$100• CVE-2026-5422
CVE-2026-5422 |
Integer Overflow Bypasses Memory Safety Checks in H5 Dataset Loading
Jun 2nd 2026
avienma007 in keras-team/keras•Python•
Medium
•$125
Medium
•Python•$125• CVE-2026-10578
CVE-2026-10578 |
Authentication Bypass via endswith() Health Check Exemption Allows Unauthenticat...
Jun 2nd 2026
galanzi2580-wq in prefecthq/prefect•Python•
High
High
•Python• CVE-2026-3514
CVE-2026-3514 |
Path Traversal via Prefix Match Bypass in `_get_os_path`
Jun 2nd 2026
zitoxxx in jupyter/jupyter•Python•
None
None
•Python |
Gateway API Authorization Bypass: Any Authenticated User Can Enumerate Secrets,...
Jun 1st 2026
galanzi2580-wq in mlflow/mlflow•Python•
Medium
•$125
Medium
•Python•$125• CVE-2026-3198
CVE-2026-3198 |
Hardcoded trust_remote_code=True in Model Implementations Bypasses User Security...
May 28th 2026
wernerina in vllm-project/vllm•Python•
High
High
•Python• CVE-2026-4944
CVE-2026-4944 |
Incomplete Fix for CVE-2026-1669: HDF5 External Storage File Disclosure in Legac...
May 26th 2026
zitoxxx in keras-team/keras•Python•
Medium
•$125
Medium
•Python•$125• CVE-2026-9630
CVE-2026-9630 |
Missing Authorization Validation on MLflow MPU Endpoints Leads to Cross-Resource...
May 25th 2026
sinon2003 in mlflow/mlflow•Python•
Critical
•$1800
Critical
•Python•$1800• CVE-2026-2651
CVE-2026-2651 |
Arbitrary Remote Code Execution via `_attn_implementation_internal` Config Injec...
May 24th 2026
yotampe-pluto in huggingface/transformers•Python•
High
•$750
High
•Python•$750• CVE-2026-4372
CVE-2026-4372 |
Git Argument Injection via Reference Field in GitHubRepository Block
May 23rd 2026
optimus-fulcria in prefecthq/prefect•Python•
High
High
•Python• CVE-2026-3515
CVE-2026-3515 |
Arbitrary File Write via Path Traversal in Orbax Checkpoint Asset Dict Keys
May 22nd 2026
wernerina in keras-team/keras•Python•
High
•$900
High
•Python•$900• CVE-2026-9257
CVE-2026-9257 |
Path traversal via startswith() prefix confusion in is_path_in_dir (bypass of CV...
May 22nd 2026
optimus-fulcria in keras-team/keras•Python•
Medium
•$125
Medium
•Python•$125• CVE-2026-9332
CVE-2026-9332 |
Authorization Bypass in SearchModelVersions Allows Any Authenticated User to Enu...
May 20th 2026
galanzi2580-wq in mlflow/mlflow•Python•
Medium
•$125
Medium
•Python•$125• CVE-2026-2734
CVE-2026-2734 |
Improper Origin Validation in MLflow Assistant /ajax-api Endpoints Enables Brows...
May 19th 2026
sinon2003 in mlflow/mlflow•Python•
Critical
•$1800
Critical
•Python•$1800• CVE-2026-2611
CVE-2026-2611 |
Remote Code Execution via Flow Studio Node Definitions
May 19th 2026
optimus-fulcria in parisneo/lollms•Python•
Critical
Critical
•Python• CVE-2026-10266
CVE-2026-10266 |
Incomplete Fix for CVE-2025-10279: get_or_create_nfs_tmp_dir() Still Creates Wor...
May 18th 2026
wuqingyi20 in mlflow/mlflow•Python•
High
•$900
High
•Python•$900• CVE-2026-4137
CVE-2026-4137 |
Authentication Bypass on FastAPI Routes (Job API, OTel API) When Basic Auth Enab...
May 14th 2026
alrightryanx in mlflow/mlflow•Python•
High
•$900
High
•Python•$900• CVE-2026-2652
CVE-2026-2652 |
Arbitrary File Read via Prompt Tag Source Validation Bypass in CreateModelVersio...
May 11th 2026
phenggeler in mlflow/mlflow•Python•
High
•$900
High
•Python•$900• CVE-2026-2614
CVE-2026-2614 |
SSRF in MLflow via user-controlled webhook URL parameter
May 11th 2026
0xmanan in mlflow/mlflow•Python•
High
•$900
High
•Python•$900• CVE-2026-2393
CVE-2026-2393 |
Zip Slip path traversal in keras.utils.get_file(..., extract=True) archive extra...
May 3rd 2026
theagentknownasren-gif in keras-team/keras•Python•
None
None
•Python |
Infinite Loop Denial of Service via Circular Dependencies in Functional Model De...
Apr 28th 2026
spamblue890-oss in keras-team/keras•Python•
Medium
•$125
Medium
•Python•$125• CVE-2026-9333
CVE-2026-9333 |
H2O-3 PostgreSQL Driver RCE - Bypassing CVE-2025-6544 Mitigation
Apr 23rd 2026
whippet0 in h2oai/h2o-3•Jupyter Notebook•
Medium
Medium
•Jupyter Notebook• CVE-2026-3960
CVE-2026-3960 |
Arbitrary File Read via Log Symlink following in FileTaskHandler
Apr 18th 2026
bademeischta in apache/airflow•Python•
Medium
•$100
Medium
•Python•$100 |
TFSMLayer bypasses `safe_mode=True`, allowing attacker-controlled code execution...
Apr 13th 2026
0xmanan in keras-team/keras•Python•
High
•$900
High
•Python•$900• CVE-2026-1462
CVE-2026-1462 |
Integer Overflow lead to DOS in handling Accept-Encoding header in API /v2/model...
Apr 12th 2026
seaw1nd in triton-inference-server/server•Python•
High
•$750
High
•Python•$750 |
XSS in Chat Message Leads to Account Tackover
Apr 11th 2026
justmahmoud1 in parisneo/lollms•Python•
High
High
•Python• CVE-2026-1116
CVE-2026-1116 |
Stored XSS in Home Feed via Post Content Lead to Account Takeover
Apr 10th 2026
justmahmoud1 in parisneo/lollms•Python•
Critical
Critical
•Python• CVE-2026-1115
CVE-2026-1115 |
Session is not expiring after password resetting
Apr 7th 2026
justmahmoud1 in parisneo/lollms•Python•
Medium
Medium
•Python• CVE-2026-1163
CVE-2026-1163 |
Path Traversal in Agent Flows via `uuid` (Arbitrary .json File Read/Delete)
Apr 7th 2026
chenhouser2025 in mintplex-labs/anything-llm•JavaScript•
Critical
Critical
•JavaScript• CVE-2026-5627
CVE-2026-5627 |
Improper Access Control via Weak JWT Token Leads to Admin Takeover and Privilege...
Apr 7th 2026
justmahmoud1 in parisneo/lollms•Python•
Critical
Critical
•Python• CVE-2026-1114
CVE-2026-1114 |
Arbitrary Code Execution via Unsafe torch.load() in Trainer Checkpoint Loading
Apr 7th 2026
colemurray in huggingface/transformers•Python•
Medium
•$125
Medium
•Python•$125• CVE-2026-1839
CVE-2026-1839 |
Unbounded Classification Output Sorting Leads to Remote Denial-of-Service in Tri...
Apr 6th 2026
hyperps in triton-inference-server/server•Python•
High
•$750
High
•Python•$750 |
Job API exposed without authorization
Apr 3rd 2026
raltheo in mlflow/mlflow•Python•
Critical
•$1500
Critical
•Python•$1500• CVE-2026-0545
CVE-2026-0545 |
Airflow externalLogUrl Permission Bypass
Apr 2nd 2026
34selen in apache/airflow•Python•
Medium
•$100
Medium
•Python•$100 |
Command Injection through bash -c
Mar 31st 2026
raltheo in mlflow/mlflow•Python•
Critical
•$1500
Critical
•Python•$1500• CVE-2026-0596
CVE-2026-0596 |
Command Injection via Malicious Model Artifacts
Mar 30th 2026
colemurray in mlflow/mlflow•Python•
Critical
•$1500
Critical
•Python•$1500• CVE-2025-15379
CVE-2025-15379 |
MLflow Tarfile Path traversal in mlflow/mlflow
Mar 29th 2026
bilisheep in mlflow/mlflow•Python•
Critical
•$1500
Critical
•Python•$1500• CVE-2025-15036
CVE-2025-15036 |
Unauthenticated File Upload in LollMS
Mar 29th 2026
aydinnyunus in parisneo/lollms•Python•
High
High
•Python• CVE-2026-0558
CVE-2026-0558 |
Server-Side Request Forgery (SSRF) in LollMS Export Content
Mar 29th 2026
aydinnyunus in parisneo/lollms•Python•
High
High
•Python• CVE-2026-0560
CVE-2026-0560 |
Insecure Direct Object Reference (IDOR) in LollMS Friend Request Response
Mar 29th 2026
aydinnyunus in parisneo/lollms•Python•
High
High
•Python• CVE-2026-0562
CVE-2026-0562 |
Content-Type Spoofing in LollMS Image Upload
Mar 29th 2026
aydinnyunus in parisneo/lollms•Python•
Medium
Medium
•Python• CVE-2026-5728
CVE-2026-5728 |
Apache Arrow IPC cached prebuffer path triggers signed integer overflow UB in re...
Mar 27th 2026
rootkid19 in apache/arrow•C++•
Medium
•$100
Medium
•C++•$100 |
Tracing + Assessments Access
Mar 27th 2026
raltheo in mlflow/mlflow•Python•
High
•$750
High
•Python•$750• CVE-2025-15381
CVE-2025-15381 |
Unsafe Pickle Deserialization in apache-airflow-providers-http leading to RCE vi...
Mar 20th 2026
skypher in apache/airflow•Python•
Low
•$15
Low
•Python•$15 |
Arbitrary file write via tar traversal
Mar 18th 2026
raltheo in mlflow/mlflow•Python•
High
•$750
High
•Python•$750• CVE-2025-15031
CVE-2025-15031 |
MLflow SageMaker Command Injection Vulnerability
Mar 15th 2026
bilisheep in mlflow/mlflow•Python•
High
•$750
High
•Python•$750• CVE-2025-14287
CVE-2025-14287 |
Command Injection in example_xcom.py via XCom race condition
Mar 11th 2026
vincent550102 in apache/airflow•Python•
High
•$600
High
•Python•$600 |
Arbitrary File Read via Absolute Path Input in nltk.util.filestring() enabling L...
Mar 9th 2026
hyperps in nltk/nltk•Python•
High
•$750
High
•Python•$750• CVE-2026-0846
CVE-2026-0846 |
Unlimited-memory decompression leads to DoS bypassing `--http-max-input-size`
Mar 8th 2026
taiphung217 in triton-inference-server/server•Python•
High
•$750
High
•Python•$750 |
Arbitrary Code Execution in NLTK StanfordSegmenter via untrusted JAR loading
Mar 5th 2026
hyperps in nltk/nltk•Python•
Critical
•$1500
Critical
•Python•$1500• CVE-2026-0848
CVE-2026-0848 |
NLTK – Multiple CorpusReader classes allow Arbitrary File Read via Path Traversa...
Mar 4th 2026
hyperps1 in nltk/nltk•Python•
High
•$750
High
•Python•$750• CVE-2026-0847
CVE-2026-0847 |
Zip Slip Vulnerability in NLTK Downloader Leading to Remote Code Execution
Feb 18th 2026
hyperps in nltk/nltk•Python•
Critical
•$1500
Critical
•Python•$1500• CVE-2025-14009
CVE-2025-14009 |
Remote code execution via transformers_utils/get_config
Feb 8th 2026
vancir in vllm-project/vllm•Python•
High
High
•Python• CVE-2026-4943
CVE-2026-4943 |
Persistent Temp-File incomplete cleanup / resource exhaustion in `transformers`...
Feb 7th 2026
ava0-0sec in huggingface/transformers•Python•
Medium
•$125
Medium
•Python•$125• CVE-2026-6081
CVE-2026-6081 |
MLFlow server is exposed to data exfiltration and destruction due to lack of Ori...
Jan 12th 2026
eharris128 in mlflow/mlflow•Python•
High
•$750
High
•Python•$750• CVE-2025-14279
CVE-2025-14279 |
Integer Overflow lead to DOS in API `v2/models//infer`
Jan 6th 2026
seaw1nd in triton-inference-server/server•Python•
High
•$750
High
•Python•$750 |
text-generation-inference: Unbounded external image fetch in validation leads to...
Jan 1st 2026
sinon2003 in huggingface/text-generation-inference•Python•
High
•$750
High
•Python•$750• CVE-2026-0599
CVE-2026-0599 |
Arbitrary code execution during YAML config parsing in Kubernetes materializer
Jan 1st 2026
al-cybision in feast-dev/feast•Python•
High
High
•Python• CVE-2025-11157
CVE-2025-11157 |
Integer Overflow → Heap Buffer Overflow in BYTES-Tensor Parsing (DoS)
Dec 3rd 2025
taiphung217 in triton-inference-server/server•Python•
High
•$750
High
•Python•$750 |
Brotli decompression bomb DoS
Nov 30th 2025
cycloctane in urllib3/urllib3•Python•
High
High
•Python• CVE-2025-66471
CVE-2025-66471 |
Path Traversal vulnerability in keras using tar extract
Nov 28th 2025
ready-research in keras-team/keras•Python•
High
•$750
High
•Python•$750• CVE-2025-12638
CVE-2025-12638 |
Account takeover due to missing oauth audience verification in google sign in
Nov 24th 2025
djxploit in lunary-ai/lunary•TypeScript•
Critical
Critical
•TypeScript• CVE-2025-9803
CVE-2025-9803 |
Authorization Bypass in MLflow Basic Auth (unprotected Flask/GraphQL routes)
Nov 19th 2025
rahulgovind in mlflow/mlflow•Python•
High
•$750
High
•Python•$750• CVE-2025-14297
CVE-2025-14297 |
Brotli decompression bomb DoS
Oct 30th 2025
cycloctane in scrapy/scrapy•Python•
High
High
•Python• CVE-2025-6176
CVE-2025-6176 |
Denial of Service via Unbounded parameter values
Oct 30th 2025
akshayravic09yc47 in danny-avila/librechat•TypeScript•
Medium
Medium
•TypeScript• CVE-2025-8849
CVE-2025-8849 |
Insecure API Design: Able to Disable 2-Factor Authentication Without OTP or Back...
Oct 30th 2025
akshayravic09yc47 in danny-avila/librechat•TypeScript•
Low
Low
•TypeScript• CVE-2025-8850
CVE-2025-8850 |
SQLite Operator-Based SQL Injection Vulnerability in LangGraph
Oct 26th 2025
colemurray in langchain-ai/langchain•Python•
High
High
•Python• CVE-2025-8709
CVE-2025-8709 |
Possible HTML Injection in Accept-Language header
Oct 22nd 2025
georgenmatthew in danny-avila/librechat•TypeScript•
Medium
Medium
•TypeScript• CVE-2025-8848
CVE-2025-8848 |
XPath Injection in search_item_ctrl_f Function - Hugging Face Smolagents v1.20.0
Oct 21st 2025
elexs1zz in huggingface/smolagents•Python•
Medium
•$125
Medium
•Python•$125• CVE-2025-11844
CVE-2025-11844 |
User Enumeration via "Account not found" Message
Oct 16th 2025
iyadalkhatib98 in langgenius/dify•TypeScript•
Medium
Medium
•TypeScript• CVE-2025-11750
CVE-2025-11750 |
World-Writable NLTK Cache Directory Enables Local Users to Tamper with or Delete...
Oct 13th 2025
madan301 in run-llama/llama_index•Python•
High
•$750
High
•Python•$750• CVE-2025-7707
CVE-2025-7707 |
LangChain HTMLSectionSplitter – XXE caused by unsafe XSLT parsing
Oct 6th 2025
colemurray in langchain-ai/langchain•Python•
High
High
•Python• CVE-2025-6985
CVE-2025-6985 |
Path traversal, lead to remote code execution
Oct 5th 2025
makerdd in allegroai/clearml•Python•
Medium
Medium
•Python• CVE-2025-8917
CVE-2025-8917 |
Path traversal, lead to remote code execution
Oct 5th 2025
makerdd in zenml-io/zenml•Python•
Medium
Medium
•Python• CVE-2025-8406
CVE-2025-8406 |
Dependacy chain attack through hijacking broken github repository at https://gi...
Oct 1st 2025
gopal-ethical in huggingface/transformers•Python•
Low
•$20
Low
•Python•$20• CVE-2025-11264
CVE-2025-11264 |
Mass Assignment
Sep 29th 2025
viktormares in danny-avila/librechat•TypeScript•
Medium
Medium
•TypeScript• CVE-2025-7104
CVE-2025-7104 |
Insecure Temporary File Handling Vulnerability in llama-index-core
Sep 27th 2025
anwarayoob in run-llama/llama_index•Python•
High
•$750
High
•Python•$750• CVE-2025-7647
CVE-2025-7647 |
Regular Expression Denial of Service (ReDoS) in AdamWeightDecay Optimizer
Sep 23rd 2025
joelindra in huggingface/transformers•Python•
Medium
•$125
Medium
•Python•$125• CVE-2025-6921
CVE-2025-6921 |
Incorrect Access Control check results in authorization bypass
Sep 23rd 2025
viktormares in danny-avila/librechat•TypeScript•
Medium
Medium
•TypeScript• CVE-2025-7106
CVE-2025-7106 |
SSRF in MLflow via user-controlled gateway_path parameter
Sep 23rd 2025
oxqnd in mlflow/mlflow•Python•
Medium
•$125
Medium
•Python•$125• CVE-2025-14296
CVE-2025-14296 |
Bypass of Mysql Jdbc Attck for CVE-2025-6507
Sep 21st 2025
le1a in h2oai/h2o-3•Jupyter Notebook•
Critical
Critical
•Jupyter Notebook• CVE-2025-6544
CVE-2025-6544 |
Improper Access Control in Socket.IO Event Handlers Allows Unauthenticated Execu...
Sep 20th 2025
0xmanan in parisneo/lollms•Python•
High
High
•Python• CVE-2026-1117
CVE-2026-1117 |
Full system file read and delete via GET /api/v1/images/download/{bulk_download_...
Sep 18th 2025
heckintosh in invoke-ai/invokeai•TypeScript•
Critical
Critical
•TypeScript• CVE-2025-6237
CVE-2025-6237 |
Path Traversal in Tokenizer Conversion Script
Sep 16th 2025
joelindra in huggingface/transformers•Python•
Low
•$20
Low
•Python•$20• CVE-2025-11231
CVE-2025-11231 |
Regular expression Denial of Service - ReDoS
Sep 14th 2025
arjunshibu in huggingface/transformers•Python•
Medium
•$125
Medium
•Python•$125• CVE-2025-6051
CVE-2025-6051 |
Regular expression Denial of Service - ReDoS
Sep 12th 2025
arjunshibu in huggingface/transformers•Python•
Medium
•$125
Medium
•Python•$125• CVE-2025-6638
CVE-2025-6638 |
I
Sep 10th 2025
lopci in danny-avila/librechat•TypeScript•
Medium
Medium
•TypeScript• CVE-2025-6088
CVE-2025-6088 |
langchain-community: Sensitive Information Disclosure Due to Insecure XML Parsin...
Sep 4th 2025
liankee in langchain-ai/langchain•Python•
High
High
•Python• CVE-2025-6984
CVE-2025-6984 |
H2O-3 MySQL JDBC Driver Deserialization Vulnerability_Key-Value Bypass Parameter...
Sep 2nd 2025
luckyfloret in h2oai/h2o-3•Jupyter Notebook•
Critical
Critical
•Jupyter Notebook• CVE-2025-5662
CVE-2025-5662 |
Mysql Jdbc Attck about CVE-2024-45758 and CVE-2024-10553 Bypass
Sep 1st 2025
le1a in h2oai/h2o-3•Jupyter Notebook•
Critical
Critical
•Jupyter Notebook• CVE-2025-6507
CVE-2025-6507 |
Denial of Service(DOS) in JSONReader
Aug 25th 2025
winters0x64 in run-llama/llama_index•Python•
High
•$750
High
•Python•$750• CVE-2025-5302
CVE-2025-5302 |
Environment Variable XSS in Analytics Component
Aug 23rd 2025
sahiloj in lunary-ai/lunary•TypeScript•
High
High
•TypeScript• CVE-2025-5352
CVE-2025-5352 |
IDOR Vulnerability in Template Creation via `projectId` Manipulation
Aug 18th 2025
hakerbaya in lunary-ai/lunary•TypeScript•
High
High
•TypeScript• CVE-2025-4962
CVE-2025-4962 |