This page is sunsetting soon [SEE WHAT'S NEW](/content/challenges/index.html) # Hacktivity ## Browse all public vulnerabilities | | | --- | |
[Path Traversal in Keras Archive Extraction via CWD Validation Bypass Leading to...](/content/bounties/a07e3983-7158-4419-af2b-38f1dea01a4f/index.html)
Jun 11th 2026
[kimkou2024](/content/users/kimkou2024/index.html) in [keras-team/keras](/content/repos/keras-team/keras/index.html)•Python•
High
•$900
High
•Python•$900• [CVE-2026-11816](https://nvd.nist.gov/vuln/detail/CVE-2026-11816)
[CVE-2026-11816](https://nvd.nist.gov/vuln/detail/CVE-2026-11816) | |
[Unbounded Frame Count in video/jpeg Base64 Data URL Processing Leads to OOM DoS](/content/bounties/7bd92629-b396-4449-8f88-6c0092530eb4/index.html)
Jun 11th 2026
[seory0](/content/users/seory0/index.html) in [vllm-project/vllm](/content/repos/vllm-project/vllm/index.html)•Python•
High
High
•Python• [CVE-2026-5497](https://nvd.nist.gov/vuln/detail/CVE-2026-5497)
[CVE-2026-5497](https://nvd.nist.gov/vuln/detail/CVE-2026-5497) | |
[model.weights.h5: h5py.ExternalLink at Group level silently followed during load...](/content/bounties/e08fc3b8-0eb6-4e4d-bf46-c12131a56a8d/index.html)
Jun 10th 2026
[lemonkiil](/content/users/lemonkiil/index.html) in [keras-team/keras](/content/repos/keras-team/keras/index.html)•Python•
Medium
•$125
Medium
•Python•$125• [CVE-2026-9337](https://nvd.nist.gov/vuln/detail/CVE-2026-9337)
[CVE-2026-9337](https://nvd.nist.gov/vuln/detail/CVE-2026-9337) | |
[Unsafe cloudpickle deserialization in Prefect task runners and bundle deserializ...](/content/bounties/124658f5-5643-40e4-a411-fa2886770f87/index.html)
Jun 5th 2026
[etwithin](/content/users/etwithin/index.html) in [prefecthq/prefect](/content/repos/prefecthq/prefect/index.html)•Python•
None
None
•Python | |
[CWE-346: CORS Origin Validation Bypass via \`re.match()\` in \`allow\_origin\_pat\`](/content/bounties/18f642db-3569-43b3-b58d-ff97be4b09d7/index.html)
Jun 3rd 2026
[vnykmshr](/content/users/vnykmshr/index.html) in [jupyter/jupyter](/content/repos/jupyter/jupyter/index.html)•Python•
Medium
•$100
Medium
•Python•$100• [CVE-2026-6657](https://nvd.nist.gov/vuln/detail/CVE-2026-6657)
[CVE-2026-6657](https://nvd.nist.gov/vuln/detail/CVE-2026-6657) | |
[\`trust\_remote\_code=False\` Bypass in LightGlue Nested Config Resolution (Transfor...](/content/bounties/ceb3ce1a-4c45-497a-b25e-cb9a7685e619/index.html)
Jun 3rd 2026
[dev-mhyun](/content/users/dev-mhyun/index.html) in [huggingface/transformers](/content/repos/huggingface/transformers/index.html)•Python•
High
•$750
High
•Python•$750• [CVE-2026-5241](https://nvd.nist.gov/vuln/detail/CVE-2026-5241)
[CVE-2026-5241](https://nvd.nist.gov/vuln/detail/CVE-2026-5241) | |
[AI Gateway secret API accepts \`$ENV\_VAR\` references and can be remotely abused t...](/content/bounties/f8e591a0-0f19-4910-b82e-16c9956f2233/index.html)
Jun 3rd 2026
[sinon2003](/content/users/sinon2003/index.html) in [mlflow/mlflow](/content/repos/mlflow/mlflow/index.html)•Python•
Critical
•$2700
Critical
•Python•$2700• [CVE-2026-4035](https://nvd.nist.gov/vuln/detail/CVE-2026-4035)
[CVE-2026-4035](https://nvd.nist.gov/vuln/detail/CVE-2026-4035) | |
[Path Traversal via Incorrect startswith() Root Directory Check in jupyter-server...](/content/bounties/24a36953-6490-466f-8cb2-a90d1ca56e0f/index.html)
Jun 2nd 2026
[galanzi2580-wq](/content/users/galanzi2580-wq/index.html) in [jupyter/jupyter](/content/repos/jupyter/jupyter/index.html)•Python•
Medium
•$100
Medium
•Python•$100• [CVE-2026-5422](https://nvd.nist.gov/vuln/detail/CVE-2026-5422)
[CVE-2026-5422](https://nvd.nist.gov/vuln/detail/CVE-2026-5422) | |
[Integer Overflow Bypasses Memory Safety Checks in H5 Dataset Loading](/content/bounties/1e5f76e6-5a87-4255-b5a7-f7dd58e02033/index.html)
Jun 2nd 2026
[avienma007](/content/users/avienma007/index.html) in [keras-team/keras](/content/repos/keras-team/keras/index.html)•Python•
Medium
•$125
Medium
•Python•$125• [CVE-2026-10578](https://nvd.nist.gov/vuln/detail/CVE-2026-10578)
[CVE-2026-10578](https://nvd.nist.gov/vuln/detail/CVE-2026-10578) | |
[Authentication Bypass via endswith() Health Check Exemption Allows Unauthenticat...](/content/bounties/c540e5e1-f74f-44f4-bfa0-9764ff6daa75/index.html)
Jun 2nd 2026
[galanzi2580-wq](/content/users/galanzi2580-wq/index.html) in [prefecthq/prefect](/content/repos/prefecthq/prefect/index.html)•Python•
High
High
•Python• [CVE-2026-3514](https://nvd.nist.gov/vuln/detail/CVE-2026-3514)
[CVE-2026-3514](https://nvd.nist.gov/vuln/detail/CVE-2026-3514) | |
[Path Traversal via Prefix Match Bypass in \`\_get\_os\_path\`](/content/bounties/799fa82a-5fe7-4497-ab5b-8dbb4019b0e0/index.html)
Jun 2nd 2026
[zitoxxx](/content/users/zitoxxx/index.html) in [jupyter/jupyter](/content/repos/jupyter/jupyter/index.html)•Python•
None
None
•Python | |
[Gateway API Authorization Bypass: Any Authenticated User Can Enumerate Secrets,...](/content/bounties/e57db731-97d3-40c3-a429-831ee959807f/index.html)
Jun 1st 2026
[galanzi2580-wq](/content/users/galanzi2580-wq/index.html) in [mlflow/mlflow](/content/repos/mlflow/mlflow/index.html)•Python•
Medium
•$125
Medium
•Python•$125• [CVE-2026-3198](https://nvd.nist.gov/vuln/detail/CVE-2026-3198)
[CVE-2026-3198](https://nvd.nist.gov/vuln/detail/CVE-2026-3198) | |
[Hardcoded trust\_remote\_code=True in Model Implementations Bypasses User Security...](/content/bounties/97f706f7-a852-49b2-a4eb-76811e611daf/index.html)
May 28th 2026
[wernerina](/content/users/wernerina/index.html) in [vllm-project/vllm](/content/repos/vllm-project/vllm/index.html)•Python•
High
High
•Python• [CVE-2026-4944](https://nvd.nist.gov/vuln/detail/CVE-2026-4944)
[CVE-2026-4944](https://nvd.nist.gov/vuln/detail/CVE-2026-4944) | |
[Incomplete Fix for CVE-2026-1669: HDF5 External Storage File Disclosure in Legac...](/content/bounties/ffb64266-295f-431f-adae-eb48da4fbcf7/index.html)
May 26th 2026
[zitoxxx](/content/users/zitoxxx/index.html) in [keras-team/keras](/content/repos/keras-team/keras/index.html)•Python•
Medium
•$125
Medium
•Python•$125• [CVE-2026-9630](https://nvd.nist.gov/vuln/detail/CVE-2026-9630)
[CVE-2026-9630](https://nvd.nist.gov/vuln/detail/CVE-2026-9630) | |
[Missing Authorization Validation on MLflow MPU Endpoints Leads to Cross-Resource...](/content/bounties/65beb119-d3e0-4e03-af2f-fa98f78f83dc/index.html)
May 25th 2026
[sinon2003](/content/users/sinon2003/index.html) in [mlflow/mlflow](/content/repos/mlflow/mlflow/index.html)•Python•
Critical
•$1800
Critical
•Python•$1800• [CVE-2026-2651](https://nvd.nist.gov/vuln/detail/CVE-2026-2651)
[CVE-2026-2651](https://nvd.nist.gov/vuln/detail/CVE-2026-2651) | |
[Arbitrary Remote Code Execution via \`\_attn\_implementation\_internal\` Config Injec...](/content/bounties/1f693a6e-6836-4b8b-a0bd-ca036fba8884/index.html)
May 24th 2026
[yotampe-pluto](/content/users/yotampe-pluto/index.html) in [huggingface/transformers](/content/repos/huggingface/transformers/index.html)•Python•
High
•$750
High
•Python•$750• [CVE-2026-4372](https://nvd.nist.gov/vuln/detail/CVE-2026-4372)
[CVE-2026-4372](https://nvd.nist.gov/vuln/detail/CVE-2026-4372) | |
[Git Argument Injection via Reference Field in GitHubRepository Block](/content/bounties/f3b048b8-7f4e-45ef-a5a7-cb841c39acde/index.html)
May 23rd 2026
[optimus-fulcria](/content/users/optimus-fulcria/index.html) in [prefecthq/prefect](/content/repos/prefecthq/prefect/index.html)•Python•
High
High
•Python• [CVE-2026-3515](https://nvd.nist.gov/vuln/detail/CVE-2026-3515)
[CVE-2026-3515](https://nvd.nist.gov/vuln/detail/CVE-2026-3515) | |
[Arbitrary File Write via Path Traversal in Orbax Checkpoint Asset Dict Keys](/content/bounties/10cab9c4-59ac-4bc9-b26f-8f73a22339d8/index.html)
May 22nd 2026
[wernerina](/content/users/wernerina/index.html) in [keras-team/keras](/content/repos/keras-team/keras/index.html)•Python•
High
•$900
High
•Python•$900• [CVE-2026-9257](https://nvd.nist.gov/vuln/detail/CVE-2026-9257)
[CVE-2026-9257](https://nvd.nist.gov/vuln/detail/CVE-2026-9257) | |
[Path traversal via startswith() prefix confusion in is\_path\_in\_dir (bypass of CV...](/content/bounties/ad6c4ec5-c419-4c42-8809-e05502773912/index.html)
May 22nd 2026
[optimus-fulcria](/content/users/optimus-fulcria/index.html) in [keras-team/keras](/content/repos/keras-team/keras/index.html)•Python•
Medium
•$125
Medium
•Python•$125• [CVE-2026-9332](https://nvd.nist.gov/vuln/detail/CVE-2026-9332)
[CVE-2026-9332](https://nvd.nist.gov/vuln/detail/CVE-2026-9332) | |
[Authorization Bypass in SearchModelVersions Allows Any Authenticated User to Enu...](/content/bounties/d632f783-b2c7-4a3b-af5e-1d693e841c08/index.html)
May 20th 2026
[galanzi2580-wq](/content/users/galanzi2580-wq/index.html) in [mlflow/mlflow](/content/repos/mlflow/mlflow/index.html)•Python•
Medium
•$125
Medium
•Python•$125• [CVE-2026-2734](https://nvd.nist.gov/vuln/detail/CVE-2026-2734)
[CVE-2026-2734](https://nvd.nist.gov/vuln/detail/CVE-2026-2734) | |
[Improper Origin Validation in MLflow Assistant /ajax-api Endpoints Enables Brows...](/content/bounties/8462addd-b464-4a84-b6a2-5529604e6e5a/index.html)
May 19th 2026
[sinon2003](/content/users/sinon2003/index.html) in [mlflow/mlflow](/content/repos/mlflow/mlflow/index.html)•Python•
Critical
•$1800
Critical
•Python•$1800• [CVE-2026-2611](https://nvd.nist.gov/vuln/detail/CVE-2026-2611)
[CVE-2026-2611](https://nvd.nist.gov/vuln/detail/CVE-2026-2611) | |
[Remote Code Execution via Flow Studio Node Definitions](/content/bounties/96fa7685-6051-41e0-bb01-b36d0e89c286/index.html)
May 19th 2026
[optimus-fulcria](/content/users/optimus-fulcria/index.html) in [parisneo/lollms](/content/repos/parisneo/lollms/index.html)•Python•
Critical
Critical
•Python• [CVE-2026-10266](https://nvd.nist.gov/vuln/detail/CVE-2026-10266)
[CVE-2026-10266](https://nvd.nist.gov/vuln/detail/CVE-2026-10266) | |
[Incomplete Fix for CVE-2025-10279: get\_or\_create\_nfs\_tmp\_dir() Still Creates Wor...](/content/bounties/648dc30b-76c7-4433-86b8-f43d926fd8d6/index.html)
May 18th 2026
[wuqingyi20](/content/users/wuqingyi20/index.html) in [mlflow/mlflow](/content/repos/mlflow/mlflow/index.html)•Python•
High
•$900
High
•Python•$900• [CVE-2026-4137](https://nvd.nist.gov/vuln/detail/CVE-2026-4137)
[CVE-2026-4137](https://nvd.nist.gov/vuln/detail/CVE-2026-4137) | |
[Authentication Bypass on FastAPI Routes (Job API, OTel API) When Basic Auth Enab...](/content/bounties/5aeff5f0-49c7-4180-b5cb-c9a046f16756/index.html)
May 14th 2026
[alrightryanx](/content/users/alrightryanx/index.html) in [mlflow/mlflow](/content/repos/mlflow/mlflow/index.html)•Python•
High
•$900
High
•Python•$900• [CVE-2026-2652](https://nvd.nist.gov/vuln/detail/CVE-2026-2652)
[CVE-2026-2652](https://nvd.nist.gov/vuln/detail/CVE-2026-2652) | |
[Arbitrary File Read via Prompt Tag Source Validation Bypass in CreateModelVersio...](/content/bounties/19380271-3fbf-4beb-987e-6fd7069c55e6/index.html)
May 11th 2026
[phenggeler](/content/users/phenggeler/index.html) in [mlflow/mlflow](/content/repos/mlflow/mlflow/index.html)•Python•
High
•$900
High
•Python•$900• [CVE-2026-2614](https://nvd.nist.gov/vuln/detail/CVE-2026-2614)
[CVE-2026-2614](https://nvd.nist.gov/vuln/detail/CVE-2026-2614) | |
[SSRF in MLflow via user-controlled webhook URL parameter](/content/bounties/04ef100d-06b5-4a70-95b1-b7be23aa8150/index.html)
May 11th 2026
[0xmanan](/content/users/0xmanan/index.html) in [mlflow/mlflow](/content/repos/mlflow/mlflow/index.html)•Python•
High
•$900
High
•Python•$900• [CVE-2026-2393](https://nvd.nist.gov/vuln/detail/CVE-2026-2393)
[CVE-2026-2393](https://nvd.nist.gov/vuln/detail/CVE-2026-2393) | |
[Zip Slip path traversal in keras.utils.get\_file(..., extract=True) archive extra...](/content/bounties/c8bcd0aa-35e6-4d96-a52b-e2bab8958502/index.html)
May 3rd 2026
[theagentknownasren-gif](/content/users/theagentknownasren-gif/index.html) in [keras-team/keras](/content/repos/keras-team/keras/index.html)•Python•
None
None
•Python | |
[Infinite Loop Denial of Service via Circular Dependencies in Functional Model De...](/content/bounties/ffef6867-514e-47c3-a395-32e29305e411/index.html)
Apr 28th 2026
[spamblue890-oss](/content/users/spamblue890-oss/index.html) in [keras-team/keras](/content/repos/keras-team/keras/index.html)•Python•
Medium
•$125
Medium
•Python•$125• [CVE-2026-9333](https://nvd.nist.gov/vuln/detail/CVE-2026-9333)
[CVE-2026-9333](https://nvd.nist.gov/vuln/detail/CVE-2026-9333) | |
[H2O-3 PostgreSQL Driver RCE - Bypassing CVE-2025-6544 Mitigation](/content/bounties/6954fe04-b905-453f-8c53-205ac8377e0d/index.html)
Apr 23rd 2026
[whippet0](/content/users/whippet0/index.html) in [h2oai/h2o-3](/content/repos/h2oai/h2o-3/index.html)•Jupyter Notebook•
Medium
Medium
•Jupyter Notebook• [CVE-2026-3960](https://nvd.nist.gov/vuln/detail/CVE-2026-3960)
[CVE-2026-3960](https://nvd.nist.gov/vuln/detail/CVE-2026-3960) | |
[Arbitrary File Read via Log Symlink following in FileTaskHandler](/content/bounties/8554ec70-2095-44d7-819c-1f181da22166/index.html)
Apr 18th 2026
[bademeischta](/content/users/bademeischta/index.html) in [apache/airflow](/content/repos/apache/airflow/index.html)•Python•
Medium
•$100
Medium
•Python•$100 | |
[TFSMLayer bypasses \`safe\_mode=True\`, allowing attacker-controlled code execution...](/content/bounties/7e78d6f1-6977-4300-b595-e81bdbda331c/index.html)
Apr 13th 2026
[0xmanan](/content/users/0xmanan/index.html) in [keras-team/keras](/content/repos/keras-team/keras/index.html)•Python•
High
•$900
High
•Python•$900• [CVE-2026-1462](https://nvd.nist.gov/vuln/detail/CVE-2026-1462)
[CVE-2026-1462](https://nvd.nist.gov/vuln/detail/CVE-2026-1462) | |
[Integer Overflow lead to DOS in handling Accept-Encoding header in API /v2/model...](/content/bounties/541b64b9-6bd2-477d-b9f0-c66575e20848/index.html)
Apr 12th 2026
[seaw1nd](/content/users/seaw1nd/index.html) in [triton-inference-server/server](/content/repos/triton-inference-server/server/index.html)•Python•
High
•$750
High
•Python•$750 | |
[XSS in Chat Message Leads to Account Tackover](/content/bounties/d3d076a7-2a51-4e07-8d0e-91e28e76788e/index.html)
Apr 11th 2026
[justmahmoud1](/content/users/justmahmoud1/index.html) in [parisneo/lollms](/content/repos/parisneo/lollms/index.html)•Python•
High
High
•Python• [CVE-2026-1116](https://nvd.nist.gov/vuln/detail/CVE-2026-1116)
[CVE-2026-1116](https://nvd.nist.gov/vuln/detail/CVE-2026-1116) | |
[Stored XSS in Home Feed via Post Content Lead to Account Takeover](/content/bounties/099aa4fe-7165-4337-889c-3fb4f1aa71aa/index.html)
Apr 10th 2026
[justmahmoud1](/content/users/justmahmoud1/index.html) in [parisneo/lollms](/content/repos/parisneo/lollms/index.html)•Python•
Critical
Critical
•Python• [CVE-2026-1115](https://nvd.nist.gov/vuln/detail/CVE-2026-1115)
[CVE-2026-1115](https://nvd.nist.gov/vuln/detail/CVE-2026-1115) | |
[Session is not expiring after password resetting](/content/bounties/abe2d1c4-c21c-4608-8a8e-274565246a8b/index.html)
Apr 7th 2026
[justmahmoud1](/content/users/justmahmoud1/index.html) in [parisneo/lollms](/content/repos/parisneo/lollms/index.html)•Python•
Medium
Medium
•Python• [CVE-2026-1163](https://nvd.nist.gov/vuln/detail/CVE-2026-1163)
[CVE-2026-1163](https://nvd.nist.gov/vuln/detail/CVE-2026-1163) | |
[Path Traversal in Agent Flows via \`uuid\` (Arbitrary .json File Read/Delete)](/content/bounties/597d41c5-7ea0-4786-80f4-bd536ec66374/index.html)
Apr 7th 2026
[chenhouser2025](/content/users/chenhouser2025/index.html) in [mintplex-labs/anything-llm](/content/repos/mintplex-labs/anything-llm/index.html)•JavaScript•
Critical
Critical
•JavaScript• [CVE-2026-5627](https://nvd.nist.gov/vuln/detail/CVE-2026-5627)
[CVE-2026-5627](https://nvd.nist.gov/vuln/detail/CVE-2026-5627) | |
[Improper Access Control via Weak JWT Token Leads to Admin Takeover and Privilege...](/content/bounties/608b2a3b-2225-438e-9e61-ffbfdec2ed89/index.html)
Apr 7th 2026
[justmahmoud1](/content/users/justmahmoud1/index.html) in [parisneo/lollms](/content/repos/parisneo/lollms/index.html)•Python•
Critical
Critical
•Python• [CVE-2026-1114](https://nvd.nist.gov/vuln/detail/CVE-2026-1114)
[CVE-2026-1114](https://nvd.nist.gov/vuln/detail/CVE-2026-1114) | |
[Arbitrary Code Execution via Unsafe torch.load() in Trainer Checkpoint Loading](/content/bounties/3c77bb97-e493-493d-9a88-c57f5c536485/index.html)
Apr 7th 2026
[colemurray](/content/users/colemurray/index.html) in [huggingface/transformers](/content/repos/huggingface/transformers/index.html)•Python•
Medium
•$125
Medium
•Python•$125• [CVE-2026-1839](https://nvd.nist.gov/vuln/detail/CVE-2026-1839)
[CVE-2026-1839](https://nvd.nist.gov/vuln/detail/CVE-2026-1839) | |
[Unbounded Classification Output Sorting Leads to Remote Denial-of-Service in Tri...](/content/bounties/3204dbb2-a03a-4ece-a112-3d9439407c02/index.html)
Apr 6th 2026
[hyperps](/content/users/hyperps/index.html) in [triton-inference-server/server](/content/repos/triton-inference-server/server/index.html)•Python•
High
•$750
High
•Python•$750 | |
[Job API exposed without authorization](/content/bounties/b2e5b028-9541-4d29-8703-a76f1a3734d8/index.html)
Apr 3rd 2026
[raltheo](/content/users/raltheo/index.html) in [mlflow/mlflow](/content/repos/mlflow/mlflow/index.html)•Python•
Critical
•$1500
Critical
•Python•$1500• [CVE-2026-0545](https://nvd.nist.gov/vuln/detail/CVE-2026-0545)
[CVE-2026-0545](https://nvd.nist.gov/vuln/detail/CVE-2026-0545) | |
[Airflow externalLogUrl Permission Bypass](/content/bounties/693b8c97-f822-4f0d-9b5f-678660e3397b/index.html)
Apr 2nd 2026
[34selen](/content/users/34selen/index.html) in [apache/airflow](/content/repos/apache/airflow/index.html)•Python•
Medium
•$100
Medium
•Python•$100 | |
[Command Injection through bash -c](/content/bounties/2e905add-f9f5-4309-a3db-b17de5981285/index.html)
Mar 31st 2026
[raltheo](/content/users/raltheo/index.html) in [mlflow/mlflow](/content/repos/mlflow/mlflow/index.html)•Python•
Critical
•$1500
Critical
•Python•$1500• [CVE-2026-0596](https://nvd.nist.gov/vuln/detail/CVE-2026-0596)
[CVE-2026-0596](https://nvd.nist.gov/vuln/detail/CVE-2026-0596) | |
[Command Injection via Malicious Model Artifacts](/content/bounties/dc9c1c20-7879-4050-87df-4d095fe5ca75/index.html)
Mar 30th 2026
[colemurray](/content/users/colemurray/index.html) in [mlflow/mlflow](/content/repos/mlflow/mlflow/index.html)•Python•
Critical
•$1500
Critical
•Python•$1500• [CVE-2025-15379](https://nvd.nist.gov/vuln/detail/CVE-2025-15379)
[CVE-2025-15379](https://nvd.nist.gov/vuln/detail/CVE-2025-15379) | |
[MLflow Tarfile Path traversal in mlflow/mlflow](/content/bounties/36c314cf-fd6e-4fb0-b9b0-1b47bcdf0eb0/index.html)
Mar 29th 2026
[bilisheep](/content/users/bilisheep/index.html) in [mlflow/mlflow](/content/repos/mlflow/mlflow/index.html)•Python•
Critical
•$1500
Critical
•Python•$1500• [CVE-2025-15036](https://nvd.nist.gov/vuln/detail/CVE-2025-15036)
[CVE-2025-15036](https://nvd.nist.gov/vuln/detail/CVE-2025-15036) | |
[Unauthenticated File Upload in LollMS](/content/bounties/0a722001-89ce-4c91-b6a6-a55ee5ba2113/index.html)
Mar 29th 2026
[aydinnyunus](/content/users/aydinnyunus/index.html) in [parisneo/lollms](/content/repos/parisneo/lollms/index.html)•Python•
High
High
•Python• [CVE-2026-0558](https://nvd.nist.gov/vuln/detail/CVE-2026-0558)
[CVE-2026-0558](https://nvd.nist.gov/vuln/detail/CVE-2026-0558) | |
[Server-Side Request Forgery (SSRF) in LollMS Export Content](/content/bounties/65e43a5e-b902-4369-b738-1825285a3ea5/index.html)
Mar 29th 2026
[aydinnyunus](/content/users/aydinnyunus/index.html) in [parisneo/lollms](/content/repos/parisneo/lollms/index.html)•Python•
High
High
•Python• [CVE-2026-0560](https://nvd.nist.gov/vuln/detail/CVE-2026-0560)
[CVE-2026-0560](https://nvd.nist.gov/vuln/detail/CVE-2026-0560) | |
[Insecure Direct Object Reference (IDOR) in LollMS Friend Request Response](/content/bounties/6aab01ca-a138-4a1d-bef9-3bce145359bf/index.html)
Mar 29th 2026
[aydinnyunus](/content/users/aydinnyunus/index.html) in [parisneo/lollms](/content/repos/parisneo/lollms/index.html)•Python•
High
High
•Python• [CVE-2026-0562](https://nvd.nist.gov/vuln/detail/CVE-2026-0562)
[CVE-2026-0562](https://nvd.nist.gov/vuln/detail/CVE-2026-0562) | |
[Content-Type Spoofing in LollMS Image Upload](/content/bounties/6178eeaa-3ef8-42e0-a8d4-7b9dca928017/index.html)
Mar 29th 2026
[aydinnyunus](/content/users/aydinnyunus/index.html) in [parisneo/lollms](/content/repos/parisneo/lollms/index.html)•Python•
Medium
Medium
•Python• [CVE-2026-5728](https://nvd.nist.gov/vuln/detail/CVE-2026-5728)
[CVE-2026-5728](https://nvd.nist.gov/vuln/detail/CVE-2026-5728) | |
[Apache Arrow IPC cached prebuffer path triggers signed integer overflow UB in re...](/content/bounties/655d0aff-8f04-43ec-844b-727f2934a241/index.html)
Mar 27th 2026
[rootkid19](/content/users/rootkid19/index.html) in [apache/arrow](/content/repos/apache/arrow/index.html)•C++•
Medium
•$100
Medium
•C++•$100 | |
[Tracing + Assessments Access](/content/bounties/149fb2f9-ef4b-4136-a25c-20563451904c/index.html)
Mar 27th 2026
[raltheo](/content/users/raltheo/index.html) in [mlflow/mlflow](/content/repos/mlflow/mlflow/index.html)•Python•
High
•$750
High
•Python•$750• [CVE-2025-15381](https://nvd.nist.gov/vuln/detail/CVE-2025-15381)
[CVE-2025-15381](https://nvd.nist.gov/vuln/detail/CVE-2025-15381) | |
[Unsafe Pickle Deserialization in apache-airflow-providers-http leading to RCE vi...](/content/bounties/768ab51d-0624-4107-bee9-5ee957e80254/index.html)
Mar 20th 2026
[skypher](/content/users/skypher/index.html) in [apache/airflow](/content/repos/apache/airflow/index.html)•Python•
Low
•$15
Low
•Python•$15 | |
[Arbitrary file write via tar traversal](/content/bounties/09856f77-f968-446f-a930-657d126efe4e/index.html)
Mar 18th 2026
[raltheo](/content/users/raltheo/index.html) in [mlflow/mlflow](/content/repos/mlflow/mlflow/index.html)•Python•
High
•$750
High
•Python•$750• [CVE-2025-15031](https://nvd.nist.gov/vuln/detail/CVE-2025-15031)
[CVE-2025-15031](https://nvd.nist.gov/vuln/detail/CVE-2025-15031) | |
[MLflow SageMaker Command Injection Vulnerability](/content/bounties/229cd526-41aa-4819-b6f0-e2d0371c89e3/index.html)
Mar 15th 2026
[bilisheep](/content/users/bilisheep/index.html) in [mlflow/mlflow](/content/repos/mlflow/mlflow/index.html)•Python•
High
•$750
High
•Python•$750• [CVE-2025-14287](https://nvd.nist.gov/vuln/detail/CVE-2025-14287)
[CVE-2025-14287](https://nvd.nist.gov/vuln/detail/CVE-2025-14287) | |
[Command Injection in example\_xcom.py via XCom race condition](/content/bounties/ef3fb381-b57a-46d8-8e33-a680e7fde431/index.html)
Mar 11th 2026
[vincent550102](/content/users/vincent550102/index.html) in [apache/airflow](/content/repos/apache/airflow/index.html)•Python•
High
•$600
High
•Python•$600 | |
[Arbitrary File Read via Absolute Path Input in nltk.util.filestring() enabling L...](/content/bounties/007b84f8-418e-4300-99d0-bf504c2f97eb/index.html)
Mar 9th 2026
[hyperps](/content/users/hyperps/index.html) in [nltk/nltk](/content/repos/nltk/nltk/index.html)•Python•
High
•$750
High
•Python•$750• [CVE-2026-0846](https://nvd.nist.gov/vuln/detail/CVE-2026-0846)
[CVE-2026-0846](https://nvd.nist.gov/vuln/detail/CVE-2026-0846) | |
[Unlimited-memory decompression leads to DoS bypassing \`--http-max-input-size\`](/content/bounties/e6b0f46a-5cf0-4bd4-8e09-45ccbbaecc40/index.html)
Mar 8th 2026
[taiphung217](/content/users/taiphung217/index.html) in [triton-inference-server/server](/content/repos/triton-inference-server/server/index.html)•Python•
High
•$750
High
•Python•$750 | |
[Arbitrary Code Execution in NLTK StanfordSegmenter via untrusted JAR loading](/content/bounties/08b109bb-ac24-403f-9422-1c246ce60202/index.html)
Mar 5th 2026
[hyperps](/content/users/hyperps/index.html) in [nltk/nltk](/content/repos/nltk/nltk/index.html)•Python•
Critical
•$1500
Critical
•Python•$1500• [CVE-2026-0848](https://nvd.nist.gov/vuln/detail/CVE-2026-0848)
[CVE-2026-0848](https://nvd.nist.gov/vuln/detail/CVE-2026-0848) | |
[NLTK – Multiple CorpusReader classes allow Arbitrary File Read via Path Traversa...](/content/bounties/fc69914f-36a9-4c18-8503-10013b39f966/index.html)
Mar 4th 2026
[hyperps1](/content/users/hyperps1/index.html) in [nltk/nltk](/content/repos/nltk/nltk/index.html)•Python•
High
•$750
High
•Python•$750• [CVE-2026-0847](https://nvd.nist.gov/vuln/detail/CVE-2026-0847)
[CVE-2026-0847](https://nvd.nist.gov/vuln/detail/CVE-2026-0847) | |
[Zip Slip Vulnerability in NLTK Downloader Leading to Remote Code Execution](/content/bounties/49ecbc02-054e-4470-b2e0-b267936cc4e4/index.html)
Feb 18th 2026
[hyperps](/content/users/hyperps/index.html) in [nltk/nltk](/content/repos/nltk/nltk/index.html)•Python•
Critical
•$1500
Critical
•Python•$1500• [CVE-2025-14009](https://nvd.nist.gov/vuln/detail/CVE-2025-14009)
[CVE-2025-14009](https://nvd.nist.gov/vuln/detail/CVE-2025-14009) | |
[Remote code execution via transformers\_utils/get\_config](/content/bounties/73f342e0-c7fb-4669-b6f5-933190b3d223/index.html)
Feb 8th 2026
[vancir](/content/users/vancir/index.html) in [vllm-project/vllm](/content/repos/vllm-project/vllm/index.html)•Python•
High
High
•Python• [CVE-2026-4943](https://nvd.nist.gov/vuln/detail/CVE-2026-4943)
[CVE-2026-4943](https://nvd.nist.gov/vuln/detail/CVE-2026-4943) | |
[Persistent Temp-File incomplete cleanup / resource exhaustion in \`transformers\`...](/content/bounties/0b70bfa7-9f09-484b-b0e6-10e6a235c3b9/index.html)
Feb 7th 2026
[ava0-0sec](/content/users/ava0-0sec/index.html) in [huggingface/transformers](/content/repos/huggingface/transformers/index.html)•Python•
Medium
•$125
Medium
•Python•$125• [CVE-2026-6081](https://nvd.nist.gov/vuln/detail/CVE-2026-6081)
[CVE-2026-6081](https://nvd.nist.gov/vuln/detail/CVE-2026-6081) | |
[MLFlow server is exposed to data exfiltration and destruction due to lack of Ori...](/content/bounties/ef478f72-2e4f-44dc-8055-fc06bef03108/index.html)
Jan 12th 2026
[eharris128](/content/users/eharris128/index.html) in [mlflow/mlflow](/content/repos/mlflow/mlflow/index.html)•Python•
High
•$750
High
•Python•$750• [CVE-2025-14279](https://nvd.nist.gov/vuln/detail/CVE-2025-14279)
[CVE-2025-14279](https://nvd.nist.gov/vuln/detail/CVE-2025-14279) | |
[Integer Overflow lead to DOS in API \`v2/models//infer\`](/content/bounties/14eb8e5d-b858-442e-8029-48cd3743b5c3/index.html)
Jan 6th 2026
[seaw1nd](/content/users/seaw1nd/index.html) in [triton-inference-server/server](/content/repos/triton-inference-server/server/index.html)•Python•
High
•$750
High
•Python•$750 | |
[text-generation-inference: Unbounded external image fetch in validation leads to...](/content/bounties/1d3f2085-666c-4441-b265-22f6f7d8d9cd/index.html)
Jan 1st 2026
[sinon2003](/content/users/sinon2003/index.html) in [huggingface/text-generation-inference](/content/repos/huggingface/text-generation-inference/index.html)•Python•
High
•$750
High
•Python•$750• [CVE-2026-0599](https://nvd.nist.gov/vuln/detail/CVE-2026-0599)
[CVE-2026-0599](https://nvd.nist.gov/vuln/detail/CVE-2026-0599) | |
[Arbitrary code execution during YAML config parsing in Kubernetes materializer](/content/bounties/46d4d585-b968-4a76-80ce-872bc5525564/index.html)
Jan 1st 2026
[al-cybision](/content/users/al-cybision/index.html) in [feast-dev/feast](/content/repos/feast-dev/feast/index.html)•Python•
High
High
•Python• [CVE-2025-11157](https://nvd.nist.gov/vuln/detail/CVE-2025-11157)
[CVE-2025-11157](https://nvd.nist.gov/vuln/detail/CVE-2025-11157) | |
[Integer Overflow → Heap Buffer Overflow in BYTES-Tensor Parsing (DoS)](/content/bounties/15e27003-912f-4dad-95f0-7f04a2d4e506/index.html)
Dec 3rd 2025
[taiphung217](/content/users/taiphung217/index.html) in [triton-inference-server/server](/content/repos/triton-inference-server/server/index.html)•Python•
High
•$750
High
•Python•$750 | |
[Brotli decompression bomb DoS](/content/bounties/89cbe781-5fa2-41e4-9f65-66d7cc2959fe/index.html)
Nov 30th 2025
[cycloctane](/content/users/cycloctane/index.html) in [urllib3/urllib3](/content/repos/urllib3/urllib3/index.html)•Python•
High
High
•Python• [CVE-2025-66471](https://nvd.nist.gov/vuln/detail/CVE-2025-66471)
[CVE-2025-66471](https://nvd.nist.gov/vuln/detail/CVE-2025-66471) | |
[Path Traversal vulnerability in keras using tar extract](/content/bounties/f94f5beb-54d8-4e6a-8bac-86d9aee103f4/index.html)
Nov 28th 2025
[ready-research](/content/users/ready-research/index.html) in [keras-team/keras](/content/repos/keras-team/keras/index.html)•Python•
High
•$750
High
•Python•$750• [CVE-2025-12638](https://nvd.nist.gov/vuln/detail/CVE-2025-12638)
[CVE-2025-12638](https://nvd.nist.gov/vuln/detail/CVE-2025-12638) | |
[Account takeover due to missing oauth audience verification in google sign in](/content/bounties/4734f35f-514c-4d10-98fa-3a54514f6af6/index.html)
Nov 24th 2025
[djxploit](/content/users/djxploit/index.html) in [lunary-ai/lunary](/content/repos/lunary-ai/lunary/index.html)•TypeScript•
Critical
Critical
•TypeScript• [CVE-2025-9803](https://nvd.nist.gov/vuln/detail/CVE-2025-9803)
[CVE-2025-9803](https://nvd.nist.gov/vuln/detail/CVE-2025-9803) | |
[Authorization Bypass in MLflow Basic Auth (unprotected Flask/GraphQL routes)](/content/bounties/57c69e73-e5ec-452d-8b9c-60ae18563e4d/index.html)
Nov 19th 2025
[rahulgovind](/content/users/rahulgovind/index.html) in [mlflow/mlflow](/content/repos/mlflow/mlflow/index.html)•Python•
High
•$750
High
•Python•$750• [CVE-2025-14297](https://nvd.nist.gov/vuln/detail/CVE-2025-14297)
[CVE-2025-14297](https://nvd.nist.gov/vuln/detail/CVE-2025-14297) | |
[Brotli decompression bomb DoS](/content/bounties/2c26a886-5984-47ee-a421-0d5fe1344eb0/index.html)
Oct 30th 2025
[cycloctane](/content/users/cycloctane/index.html) in [scrapy/scrapy](/content/repos/scrapy/scrapy/index.html)•Python•
High
High
•Python• [CVE-2025-6176](https://nvd.nist.gov/vuln/detail/CVE-2025-6176)
[CVE-2025-6176](https://nvd.nist.gov/vuln/detail/CVE-2025-6176) | |
[Denial of Service via Unbounded parameter values](/content/bounties/e9d9404c-cd19-4226-a580-9cba14b7d7d6/index.html)
Oct 30th 2025
[akshayravic09yc47](/content/users/akshayravic09yc47/index.html) in [danny-avila/librechat](/content/repos/danny-avila/librechat/index.html)•TypeScript•
Medium
Medium
•TypeScript• [CVE-2025-8849](https://nvd.nist.gov/vuln/detail/CVE-2025-8849)
[CVE-2025-8849](https://nvd.nist.gov/vuln/detail/CVE-2025-8849) | |
[Insecure API Design: Able to Disable 2-Factor Authentication Without OTP or Back...](/content/bounties/8e615709-f4de-41e2-b194-f0d91ed7c75e/index.html)
Oct 30th 2025
[akshayravic09yc47](/content/users/akshayravic09yc47/index.html) in [danny-avila/librechat](/content/repos/danny-avila/librechat/index.html)•TypeScript•
Low
Low
•TypeScript• [CVE-2025-8850](https://nvd.nist.gov/vuln/detail/CVE-2025-8850)
[CVE-2025-8850](https://nvd.nist.gov/vuln/detail/CVE-2025-8850) | |
[SQLite Operator-Based SQL Injection Vulnerability in LangGraph](/content/bounties/9793f4b3-76f8-44a4-989f-49a2177ee118/index.html)
Oct 26th 2025
[colemurray](/content/users/colemurray/index.html) in [langchain-ai/langchain](/content/repos/langchain-ai/langchain/index.html)•Python•
High
High
•Python• [CVE-2025-8709](https://nvd.nist.gov/vuln/detail/CVE-2025-8709)
[CVE-2025-8709](https://nvd.nist.gov/vuln/detail/CVE-2025-8709) | |
[Possible HTML Injection in Accept-Language header](/content/bounties/a05ebc1f-882a-4adc-b178-d3cefa4b730e/index.html)
Oct 22nd 2025
[georgenmatthew](/content/users/georgenmatthew/index.html) in [danny-avila/librechat](/content/repos/danny-avila/librechat/index.html)•TypeScript•
Medium
Medium
•TypeScript• [CVE-2025-8848](https://nvd.nist.gov/vuln/detail/CVE-2025-8848)
[CVE-2025-8848](https://nvd.nist.gov/vuln/detail/CVE-2025-8848) | |
[XPath Injection in search\_item\_ctrl\_f Function - Hugging Face Smolagents v1.20.0](/content/bounties/01ab4405-9bca-4b26-b7a3-5ca1863a69b4/index.html)
Oct 21st 2025
[elexs1zz](/content/users/elexs1zz/index.html) in [huggingface/smolagents](/content/repos/huggingface/smolagents/index.html)•Python•
Medium
•$125
Medium
•Python•$125• [CVE-2025-11844](https://nvd.nist.gov/vuln/detail/CVE-2025-11844)
[CVE-2025-11844](https://nvd.nist.gov/vuln/detail/CVE-2025-11844) | |
[User Enumeration via "Account not found" Message](/content/bounties/e7359f9f-c004-4304-9de9-753622d370a1/index.html)
Oct 16th 2025
[iyadalkhatib98](/content/users/iyadalkhatib98/index.html) in [langgenius/dify](/content/repos/langgenius/dify/index.html)•TypeScript•
Medium
Medium
•TypeScript• [CVE-2025-11750](https://nvd.nist.gov/vuln/detail/CVE-2025-11750)
[CVE-2025-11750](https://nvd.nist.gov/vuln/detail/CVE-2025-11750) | |
[World-Writable NLTK Cache Directory Enables Local Users to Tamper with or Delete...](/content/bounties/3fe2c8ab-6727-4aef-a0ef-4d2818e48803/index.html)
Oct 13th 2025
[madan301](/content/users/madan301/index.html) in [run-llama/llama\_index](/content/repos/run-llama/llama_index/index.html)•Python•
High
•$750
High
•Python•$750• [CVE-2025-7707](https://nvd.nist.gov/vuln/detail/CVE-2025-7707)
[CVE-2025-7707](https://nvd.nist.gov/vuln/detail/CVE-2025-7707) | |
[LangChain HTMLSectionSplitter – XXE caused by unsafe XSLT parsing](/content/bounties/cf78abbb-df3b-43de-b6ee-132b73ff8331/index.html)
Oct 6th 2025
[colemurray](/content/users/colemurray/index.html) in [langchain-ai/langchain](/content/repos/langchain-ai/langchain/index.html)•Python•
High
High
•Python• [CVE-2025-6985](https://nvd.nist.gov/vuln/detail/CVE-2025-6985)
[CVE-2025-6985](https://nvd.nist.gov/vuln/detail/CVE-2025-6985) | |
[Path traversal, lead to remote code execution](/content/bounties/588fcdd1-fea4-4cc2-a9f8-851701dcb576/index.html)
Oct 5th 2025
[makerdd](/content/users/makerdd/index.html) in [allegroai/clearml](/content/repos/allegroai/clearml/index.html)•Python•
Medium
Medium
•Python• [CVE-2025-8917](https://nvd.nist.gov/vuln/detail/CVE-2025-8917)
[CVE-2025-8917](https://nvd.nist.gov/vuln/detail/CVE-2025-8917) | |
[Path traversal, lead to remote code execution](/content/bounties/a0880d64-9928-45bf-9663-2cd81582d9e7/index.html)
Oct 5th 2025
[makerdd](/content/users/makerdd/index.html) in [zenml-io/zenml](/content/repos/zenml-io/zenml/index.html)•Python•
Medium
Medium
•Python• [CVE-2025-8406](https://nvd.nist.gov/vuln/detail/CVE-2025-8406)
[CVE-2025-8406](https://nvd.nist.gov/vuln/detail/CVE-2025-8406) | |
[Dependacy chain attack through hijacking broken github repository at https://gi...](/content/bounties/00df3d97-a0c0-4356-a753-f5acc5c916c8/index.html)
Oct 1st 2025
[gopal-ethical](/content/users/gopal-ethical/index.html) in [huggingface/transformers](/content/repos/huggingface/transformers/index.html)•Python•
Low
•$20
Low
•Python•$20• [CVE-2025-11264](https://nvd.nist.gov/vuln/detail/CVE-2025-11264)
[CVE-2025-11264](https://nvd.nist.gov/vuln/detail/CVE-2025-11264) | |
[Mass Assignment](/content/bounties/32a175c4-7543-4503-a3d0-7880abd1826b/index.html)
Sep 29th 2025
[viktormares](/content/users/viktormares/index.html) in [danny-avila/librechat](/content/repos/danny-avila/librechat/index.html)•TypeScript•
Medium
Medium
•TypeScript• [CVE-2025-7104](https://nvd.nist.gov/vuln/detail/CVE-2025-7104)
[CVE-2025-7104](https://nvd.nist.gov/vuln/detail/CVE-2025-7104) | |
[Insecure Temporary File Handling Vulnerability in llama-index-core](/content/bounties/a2baa08f-98bf-47a8-ac83-06f7411afd9e/index.html)
Sep 27th 2025
[anwarayoob](/content/users/anwarayoob/index.html) in [run-llama/llama\_index](/content/repos/run-llama/llama_index/index.html)•Python•
High
•$750
High
•Python•$750• [CVE-2025-7647](https://nvd.nist.gov/vuln/detail/CVE-2025-7647)
[CVE-2025-7647](https://nvd.nist.gov/vuln/detail/CVE-2025-7647) | |
[Regular Expression Denial of Service (ReDoS) in AdamWeightDecay Optimizer](/content/bounties/287d15a7-6e7c-45d2-8c05-11e305776f1f/index.html)
Sep 23rd 2025
[joelindra](/content/users/joelindra/index.html) in [huggingface/transformers](/content/repos/huggingface/transformers/index.html)•Python•
Medium
•$125
Medium
•Python•$125• [CVE-2025-6921](https://nvd.nist.gov/vuln/detail/CVE-2025-6921)
[CVE-2025-6921](https://nvd.nist.gov/vuln/detail/CVE-2025-6921) | |
[Incorrect Access Control check results in authorization bypass](/content/bounties/7de2765b-d1fe-4495-9144-220070857c48/index.html)
Sep 23rd 2025
[viktormares](/content/users/viktormares/index.html) in [danny-avila/librechat](/content/repos/danny-avila/librechat/index.html)•TypeScript•
Medium
Medium
•TypeScript• [CVE-2025-7106](https://nvd.nist.gov/vuln/detail/CVE-2025-7106)
[CVE-2025-7106](https://nvd.nist.gov/vuln/detail/CVE-2025-7106) | |
[SSRF in MLflow via user-controlled gateway\_path parameter](/content/bounties/04a911cb-4418-45a1-a580-0638f890bf79/index.html)
Sep 23rd 2025
[oxqnd](/content/users/oxqnd/index.html) in [mlflow/mlflow](/content/repos/mlflow/mlflow/index.html)•Python•
Medium
•$125
Medium
•Python•$125• [CVE-2025-14296](https://nvd.nist.gov/vuln/detail/CVE-2025-14296)
[CVE-2025-14296](https://nvd.nist.gov/vuln/detail/CVE-2025-14296) | |
[Bypass of Mysql Jdbc Attck for CVE-2025-6507](/content/bounties/53f35a0f-d644-4f82-93aa-89fe7e0aed40/index.html)
Sep 21st 2025
[le1a](/content/users/le1a/index.html) in [h2oai/h2o-3](/content/repos/h2oai/h2o-3/index.html)•Jupyter Notebook•
Critical
Critical
•Jupyter Notebook• [CVE-2025-6544](https://nvd.nist.gov/vuln/detail/CVE-2025-6544)
[CVE-2025-6544](https://nvd.nist.gov/vuln/detail/CVE-2025-6544) | |
[Improper Access Control in Socket.IO Event Handlers Allows Unauthenticated Execu...](/content/bounties/d2846a7f-0140-4105-b1bb-5ef64ec8b829/index.html)
Sep 20th 2025
[0xmanan](/content/users/0xmanan/index.html) in [parisneo/lollms](/content/repos/parisneo/lollms/index.html)•Python•
High
High
•Python• [CVE-2026-1117](https://nvd.nist.gov/vuln/detail/CVE-2026-1117)
[CVE-2026-1117](https://nvd.nist.gov/vuln/detail/CVE-2026-1117) | |
[Full system file read and delete via GET /api/v1/images/download/{bulk\_download\_...](/content/bounties/54ac9589-7c88-4fd4-8512-8b2f19fbaedf/index.html)
Sep 18th 2025
[heckintosh](/content/users/heckintosh/index.html) in [invoke-ai/invokeai](/content/repos/invoke-ai/invokeai/index.html)•TypeScript•
Critical
Critical
•TypeScript• [CVE-2025-6237](https://nvd.nist.gov/vuln/detail/CVE-2025-6237)
[CVE-2025-6237](https://nvd.nist.gov/vuln/detail/CVE-2025-6237) | |
[Path Traversal in Tokenizer Conversion Script](/content/bounties/fe00198e-354c-4317-86cc-9a70877aaaa9/index.html)
Sep 16th 2025
[joelindra](/content/users/joelindra/index.html) in [huggingface/transformers](/content/repos/huggingface/transformers/index.html)•Python•
Low
•$20
Low
•Python•$20• [CVE-2025-11231](https://nvd.nist.gov/vuln/detail/CVE-2025-11231)
[CVE-2025-11231](https://nvd.nist.gov/vuln/detail/CVE-2025-11231) | |
[Regular expression Denial of Service - ReDoS](/content/bounties/af929523-7b59-418a-bf55-301830b2ac9d/index.html)
Sep 14th 2025
[arjunshibu](/content/users/arjunshibu/index.html) in [huggingface/transformers](/content/repos/huggingface/transformers/index.html)•Python•
Medium
•$125
Medium
•Python•$125• [CVE-2025-6051](https://nvd.nist.gov/vuln/detail/CVE-2025-6051)
[CVE-2025-6051](https://nvd.nist.gov/vuln/detail/CVE-2025-6051) | |
[Regular expression Denial of Service - ReDoS](/content/bounties/6a6c933f-9ce8-4ded-8b3b-2c1444c61f36/index.html)
Sep 12th 2025
[arjunshibu](/content/users/arjunshibu/index.html) in [huggingface/transformers](/content/repos/huggingface/transformers/index.html)•Python•
Medium
•$125
Medium
•Python•$125• [CVE-2025-6638](https://nvd.nist.gov/vuln/detail/CVE-2025-6638)
[CVE-2025-6638](https://nvd.nist.gov/vuln/detail/CVE-2025-6638) | |
[I](/content/bounties/361405bb-a739-41eb-a680-4cb6193e7c76/index.html)
Sep 10th 2025
[lopci](/content/users/lopci/index.html) in [danny-avila/librechat](/content/repos/danny-avila/librechat/index.html)•TypeScript•
Medium
Medium
•TypeScript• [CVE-2025-6088](https://nvd.nist.gov/vuln/detail/CVE-2025-6088)
[CVE-2025-6088](https://nvd.nist.gov/vuln/detail/CVE-2025-6088) | |
[langchain-community: Sensitive Information Disclosure Due to Insecure XML Parsin...](/content/bounties/a6b521cf-258c-41c0-9edb-d8ef976abb2a/index.html)
Sep 4th 2025
[liankee](/content/users/liankee/index.html) in [langchain-ai/langchain](/content/repos/langchain-ai/langchain/index.html)•Python•
High
High
•Python• [CVE-2025-6984](https://nvd.nist.gov/vuln/detail/CVE-2025-6984)
[CVE-2025-6984](https://nvd.nist.gov/vuln/detail/CVE-2025-6984) | |
[H2O-3 MySQL JDBC Driver Deserialization Vulnerability\_Key-Value Bypass Parameter...](/content/bounties/057a743b-b2ec-4312-8262-ce0ff8bc161c/index.html)
Sep 2nd 2025
[luckyfloret](/content/users/luckyfloret/index.html) in [h2oai/h2o-3](/content/repos/h2oai/h2o-3/index.html)•Jupyter Notebook•
Critical
Critical
•Jupyter Notebook• [CVE-2025-5662](https://nvd.nist.gov/vuln/detail/CVE-2025-5662)
[CVE-2025-5662](https://nvd.nist.gov/vuln/detail/CVE-2025-5662) | |
[Mysql Jdbc Attck about CVE-2024-45758 and CVE-2024-10553 Bypass](/content/bounties/0a9d527a-2d39-4bc0-bf01-1e717587f077/index.html)
Sep 1st 2025
[le1a](/content/users/le1a/index.html) in [h2oai/h2o-3](/content/repos/h2oai/h2o-3/index.html)•Jupyter Notebook•
Critical
Critical
•Jupyter Notebook• [CVE-2025-6507](https://nvd.nist.gov/vuln/detail/CVE-2025-6507)
[CVE-2025-6507](https://nvd.nist.gov/vuln/detail/CVE-2025-6507) | |
[Denial of Service(DOS) in JSONReader](/content/bounties/70041b81-de9e-4046-8c0e-6ccd557048a6/index.html)
Aug 25th 2025
[winters0x64](/content/users/winters0x64/index.html) in [run-llama/llama\_index](/content/repos/run-llama/llama_index/index.html)•Python•
High
•$750
High
•Python•$750• [CVE-2025-5302](https://nvd.nist.gov/vuln/detail/CVE-2025-5302)
[CVE-2025-5302](https://nvd.nist.gov/vuln/detail/CVE-2025-5302) | |
[Environment Variable XSS in Analytics Component](/content/bounties/f1d3dbce-3c3e-480e-b81e-0e8afa05c491/index.html)
Aug 23rd 2025
[sahiloj](/content/users/sahiloj/index.html) in [lunary-ai/lunary](/content/repos/lunary-ai/lunary/index.html)•TypeScript•
High
High
•TypeScript• [CVE-2025-5352](https://nvd.nist.gov/vuln/detail/CVE-2025-5352)
[CVE-2025-5352](https://nvd.nist.gov/vuln/detail/CVE-2025-5352) | |
[IDOR Vulnerability in Template Creation via \`projectId\` Manipulation](/content/bounties/137a0aef-e243-49d4-832f-8e56056cba1a/index.html)
Aug 18th 2025
[hakerbaya](/content/users/hakerbaya/index.html) in [lunary-ai/lunary](/content/repos/lunary-ai/lunary/index.html)•TypeScript•
High
High
•TypeScript• [CVE-2025-4962](https://nvd.nist.gov/vuln/detail/CVE-2025-4962)
[CVE-2025-4962](https://nvd.nist.gov/vuln/detail/CVE-2025-4962) | Show more...