AI Threat Alert
AI Security Threat Feed
Latest CVEs affecting AI/ML systems, updated continuously. Tracked from NVD, GitHub Advisory, and CISA KEV.
1,140
AI/ML CVEs Tracked
171
Critical
228
New This Week
2
In CISA KEV
Weekly CISO Take + top threats
Get the week's most critical AI security threats delivered every Monday. Free, no spam.
Latest AI Security Threats
Showing 50 of 973 results — no patch Severity CVE ID Summary CVSS EPSS Package Date
HIGH CVE-2024-7959 The `/openai/models` endpoint in... 7.7 0.4% open-webui Mar 20 MEDI CVE-2024-6838 In mlflow/mlflow version v2.13.2, a vulnerability... 5.3 0.1% mlflow Mar 20 MEDI CVE-2024-6577 In the latest version of pytorch/serve, the... 6.3 0.1% — Mar 20 HIGH CVE-2024-12911 A vulnerability in the `default_jsonalyzer`... 7.1 0.2% llamaindex Mar 20 UNKN CVE-2024-12775 langgenius/dify version 0.10.1 contains a... — — — Mar 20 HIGH CVE-2024-12720 A Regular Expression Denial of Service (ReDoS)... 7.5 0.1% transformers Mar 20 HIGH CVE-2024-12704 A vulnerability in the LangChainLLM class of the... 7.5 0.3% llamaindex Mar 20 MEDI CVE-2024-12217 A vulnerability in the gradio-app/gradio... 5.3 0.1% gradio Mar 20 UNKN CVE-2024-12065 A local file inclusion vulnerability exists in... — — — Mar 20 HIGH CVE-2024-12055 A vulnerability in Ollama versions <=0.3.14... 7.5 — ollama Mar 20 CRIT CVE-2024-11041 vllm-project vllm version v0.6.2 contains a... 9.8 1.3% vllm Mar 20 UNKN CVE-2024-11037 A path traversal vulnerability exists in... — — — Mar 20 HIGH CVE-2024-11031 In version 3.83 of binary-husky/gpt_academic, a... 7.5 — — Mar 20 HIGH CVE-2024-11030 GPT Academic version 3.83 is vulnerable to a... 7.5 — — Mar 20 UNKN CVE-2024-10707 gaizhenbiao/chuanhuchatgpt version git d4ec6a3 is... — — — Mar 20 UNKN CVE-2024-10650 An unauthenticated Denial of Service (DoS)... — — — Mar 20 HIGH CVE-2024-10648 A path traversal vulnerability exists in the... 8.2 0.2% gradio Mar 20 HIGH CVE-2024-10624 A Regular Expression Denial of Service (ReDoS)... 7.5 0.8% gradio Mar 20 HIGH CVE-2024-10569 A vulnerability in the dataframe component of... 7.5 0.2% gradio Mar 20 CRIT CVE-2025-29783 vLLM is a high-throughput and memory-efficient... 9.0 1.7% vllm Mar 19 MEDI CVE-2025-29770 vLLM is a high-throughput and memory-efficient... 6.5 0.3% vllm Mar 19 CRIT CVE-2025-1550 The Keras Model.load_model function permits... 9.8 4.8% keras Mar 11 LOW CVE-2025-2149 A vulnerability was found in PyTorch 2.6.0+cu124.... 2.5 — pytorch Mar 10 HIGH CVE-2025-2148 A vulnerability was found in PyTorch 2.6.0+cu124.... 7.5 — pytorch Mar 10 CRIT CVE-2025-1945 picklescan before 0.0.23 fails to detect... 9.8 0.3% picklescan Mar 10 CRIT CVE-2025-25362 Spacy-LLM Server-Side Template Injection (SSTI)... 9.8 0.5% — Mar 5 LOW CVE-2025-1953 A vulnerability has been found in vLLM AIBrix... 2.6 — — Mar 4 CRIT CVE-2023-25574 LTI JupyterHub Authenticator does not properly... 10.0 0.2% — Feb 25 HIGH CVE-2025-25295 Label Studio has a Path Traversal Vulnerability... — 0.1% — Feb 14 CRIT CVE-2024-12366 PandasAI uses an interactive prompt function that... 9.8 5.9% — Feb 11 LOW CVE-2025-25183 vLLM is a high-throughput and memory-efficient... 2.6 0.4% vllm Feb 7 HIGH CVE-2025-24357 vLLM is a library for LLM inference and serving.... 8.8 1.0% vllm Jan 27 MEDI CVE-2024-13698 The Jobify - Job Board WordPress Theme for... 6.5 — — Jan 24 HIGH CVE-2025-23205 nbgrader's `frame-ancestors: self` grants all... — 0.3% — Jan 17 HIGH CVE-2025-23042 Gradio is an open-source Python package that... 7.5 0.1% gradio Jan 14 MEDI CVE-2024-53526 Composio Command Execution vulnerability 6.4 0.8% — Jan 8 MEDI CVE-2024-55459 An issue in keras 3.7.0 allows attackers to write... 6.5 0.1% keras Jan 8 UNKN CVE-2025-21604 LangChain4j-AIDeepin is a Retrieval enhancement... — — — Jan 6 UNKN CVE-2024-56516 free-one-api allows users to access large... — — — Dec 30 MEDI CVE-2024-11896 The Text Prompter – Unlimited chatgpt text... 6.4 — — Dec 24 HIGH CVE-2024-32965 Lobe Chat is an open-source, AI chat framework.... 8.6 — — Nov 26 HIGH CVE-2024-27134 Excessive directory permissions in MLflow leads... 7.0 0.0% mlflow Nov 25 HIGH CVE-2024-11394 Hugging Face Transformers Trax Model... 8.8 59.4% transformers Nov 22 HIGH CVE-2024-11393 Hugging Face Transformers MaskFormer Model... 8.8 76.1% transformers Nov 22 HIGH CVE-2024-11392 Hugging Face Transformers MobileViTV2... 8.8 54.9% transformers Nov 22 MEDI CVE-2024-52524 ReDoS in giskard's transformation.py... — 1.5% — Nov 14 CRIT CVE-2024-52384 Unrestricted Upload of File with Dangerous Type... 9.9 — — Nov 14 HIGH CVE-2024-21799 Path traversal for some Intel(R) Extension for... 7.1 — — Nov 13 HIGH CVE-2024-49048 TorchGeo Remote Code Execution Vulnerability 8.1 0.5% — Nov 12 HIGH CVE-2024-43598 LightGBM Remote Code Execution Vulnerability 8.1 1.6% lightgbm Nov 12 Need deeper analysis?
Get ATLAS technique mappings, compliance reports (ISO 42001, EU AI Act), breaking alerts, and full CISO analysis with a Pro subscription.
Start 14-Day Free Trial