Vulnérabilités
Aggrégat CVE / GHSA / KEV / OSV — filtrage par étiquette et catégorie.
| ID | Titre | |
|---|---|---|
| CVE-2026-47852 |
|
A local attacker on a multi-user host can pre-create the deterministic cache path and plant a...
A local attacker on a multi-user host can pre-create the deterministic cache path and plant a...
|
| CVE-2026-72642 |
|
The native inference process that Elasticsearch uses to evaluate uploaded machine learning models...
The native inference process that Elasticsearch uses to evaluate uploaded machine learning models...
|
| CVE-2026-72742 |
|
DSPy 3.3.0b1 contains a file exfiltration vulnerability in the Image and Audio output field...
DSPy 3.3.0b1 contains a file exfiltration vulnerability in the Image and Audio output field...
|
| CVE-2026-71281 |
|
Hugging Face peft's LoRA-GA and CorDA initialization modules (src/peft/tuners/lora/corda.py lines...
Hugging Face peft's LoRA-GA and CorDA initialization modules (src/peft/tuners/lora/corda.py lines...
|
| CVE-2026-67428 |
|
Flyto2 Core: Multiple HTTP-family modules fetch client-controlled URLs without the SSRF guard their siblings apply (SSRF to internal/metadata)
Flyto2 Core: Multiple HTTP-family modules fetch client-controlled URLs without the SSRF guard their siblings apply (SSRF to internal/metadata)
|
| CVE-2026-67427 |
|
Flyto2 Core: ${env.VAR} interpolation reads any env secret despite env.get being denylisted
Flyto2 Core: ${env.VAR} interpolation reads any env secret despite env.get being denylisted
|
| CVE-2026-67425 |
|
Flyto2 Core: LLM/API keys leak to an attacker-controlled base_url
Flyto2 Core: LLM/API keys leak to an attacker-controlled base_url
|
| CVE-2026-12484 |
|
Keras: TorchModuleWrapper can deserialize unsafe PyTorch pickle data
Keras: TorchModuleWrapper can deserialize unsafe PyTorch pickle data
|
| CVE-2026-7755 |
|
IBM Langflow OSS 1.0.0 through 1.10.0 Langflow could allow remote code execution due to...
IBM Langflow OSS 1.0.0 through 1.10.0 Langflow could allow remote code execution due to...
|
| CVE-2026-12773 |
|
A weakness has been identified in BerriAI litellm up to 1.59.8. Affected is the function...
A weakness has been identified in BerriAI litellm up to 1.59.8. Affected is the function...
|
| CVE-2026-47749 |
|
stable-diffusion.cpp is a pure C/C++ library for running diffusion model (Stable Diffusion, Flux, Wan, Qwen Image, Z-Image, and more) inference. Versions prior to master-584-0a7ae07 are vulnerable to...
stable-diffusion.cpp is a pure C/C++ library for running diffusion model (Stable Diffusion, Flux, Wan, Qwen Image, Z-Image, and more) inference. Versions prior to master-584-0a7ae07 are vulnerable to heap buffer overflow in SHORT_BINUNICODE parsing for PyTorch checkpoint files. The pickle .ckpt pars...
|
| CVE-2026-12191 |
|
Vulnérabilité dans deserialization (CVE-2026-12191)
vulnérabilité dans deserialization (CVE-2026-12191). L'exploitation peut entraîner la prise de contrôle totale du système.
|
| CVE-2026-5497 |
|
vLLM is vulnerable to an Out-of-Memory (OOM) Denial of Service (DoS) attack due to unbounded frame count processing in the `VideoMediaIO.load_base64()` method
vLLM is vulnerable to an Out-of-Memory (OOM) Denial of Service (DoS) attack due to unbounded frame count processing in the `VideoMediaIO.load_base64()` method
|
| CVE-2026-44285 |
|
FastGPT is an AI Agent building platform. Prior to 4.15.0-beta1, a Server-Side Request Forgery (SSRF) vulnerability allows an authenticated attacker to bypass the global isInternalAddress network prot...
FastGPT is an AI Agent building platform. Prior to 4.15.0-beta1, a Server-Side Request Forgery (SSRF) vulnerability allows an authenticated attacker to bypass the global isInternalAddress network protection and make arbitrary HTTP GET requests to internal network services. This is achieved by exploi...
|
| CVE-2026-30950 |
|
AutoGPT is a workflow automation platform for creating, deploying, and managing continuous artificial intelligence agents. Versions 0.6.36 through 0.6.50 are vulnerable to Authenticated Session Hijack...
AutoGPT is a workflow automation platform for creating, deploying, and managing continuous artificial intelligence agents. Versions 0.6.36 through 0.6.50 are vulnerable to Authenticated Session Hijacking via IDOR. If an authenticated attacker can determine the session_id of another user's session, t...
|
| CVE-2026-2614 |
|
MLflow allows an unauthenticated remote attacker to read arbitrary files from the server's filesystem
MLflow allows an unauthenticated remote attacker to read arbitrary files from the server's filesystem
|
| CVE-2026-42302 |
|
Vulnérabilité dans openai-sdk (CVE-2026-42302)
vulnérabilité dans openai-sdk (CVE-2026-42302). L'exploitation peut entraîner la prise de contrôle totale du système. Exploitable via ``entrypoint.sh``.
|
| CVE-2026-42298 |
|
Injection de code dans docker (CVE-2026-42298)
injection de code dans docker (CVE-2026-42298). L'exploitation peut entraîner la prise de contrôle totale du système. Exploitable via ``GITHUB_TOKEN``. Atténuation : mise à jour vers `>= 0` ou plus.
|
| CVE-2026-44336 |
|
Vulnérabilité dans praison (CVE-2026-44336)
vulnérabilité dans praison (CVE-2026-44336). L'exploitation peut entraîner la prise de contrôle totale du système. Exploitable via ``praisonai.rules.create``.
|
| CVE-2026-41512 |
|
Injection de code dans gem (CVE-2026-41512)
injection de code dans gem (CVE-2026-41512). L'exploitation peut entraîner la prise de contrôle totale du système. Exploitable via `POST /targets/auto_detect_selectors`.
|
| CVE-2026-41497 |
|
Injection de commande dans praison (CVE-2026-41497)
injection de commande dans praison (CVE-2026-41497). L'exploitation peut entraîner la prise de contrôle totale du système. Exploitable via ``bash``. Atténuation : mise à jour vers `>= 4.6.9` ou plus.
|
| CVE-2026-42208 KEV |
|
[KEV] Injection SQL dans Berriai litellm (CVE-2026-42208)
injection SQL dans Berriai litellm (CVE-2026-42208). L'exploitation peut entraîner la prise de contrôle totale du système. Exploitable via `POST /chat/completions`. Inscrit au CISA KEV — exploitation active confirmée. Atténuation : mise à jour vers `>=1.83.7` ou plus.
|