AI Threat Alert
AI Security Threat Feed
Latest CVEs affecting AI/ML systems, updated continuously. Tracked from NVD, GitHub Advisory, and CISA KEV.
1,140
AI/ML CVEs Tracked
171
Critical
228
New This Week
2
In CISA KEV
Weekly CISO Take + top threats
Get the week's most critical AI security threats delivered every Monday. Free, no spam.
Latest AI Security Threats
Showing 50 of 973 results — no patch Severity CVE ID Summary CVSS EPSS Package Date
MEDI CVE-2024-51751 Gradio is an open-source Python package designed... 6.5 0.3% gradio Nov 6 CRIT CVE-2024-48061 langflow <=1.0.18 is vulnerable to Remote Code... 9.8 10.2% langflow Nov 4 MEDI CVE-2024-48052 In gradio <=4.42.0, the gr.DownloadButton... 6.5 0.1% gradio Nov 4 HIGH CVE-2024-39722 An issue was discovered in Ollama before 0.1.46.... 7.5 — ollama Oct 31 HIGH CVE-2024-39721 An issue was discovered in Ollama before 0.1.34.... 7.5 — ollama Oct 31 HIGH CVE-2024-39720 An issue was discovered in Ollama before 0.1.46.... 8.2 — ollama Oct 31 HIGH CVE-2024-39719 An issue was discovered in Ollama through 0.3.14.... 7.5 — ollama Oct 31 CRIT CVE-2024-42835 langflow v1.0.12 was discovered to contain a... 9.8 16.2% langflow Oct 31 CRIT CVE-2024-48063 In PyTorch <=2.4.1, the RemoteModule has... 9.8 — pytorch Oct 29 MEDI CVE-2024-6581 Lollms vulnerable to Cross-site Scripting 6.5 1.6% lollms Oct 29 CRIT CVE-2024-8309 A vulnerability in the GraphCypherQAChain class... 9.8 3.0% langchain Oct 29 CRIT CVE-2024-7774 A path traversal vulnerability exists in the... 9.1 — langchain.js Oct 29 CRIT CVE-2024-7042 A vulnerability in the GraphCypherQAChain class... 9.8 — langchain Oct 29 UNKN CVE-2024-48919 Cursor is a code editor built for programming... — — — Oct 22 CRIT CVE-2024-49326 Unrestricted Upload of File with Dangerous Type... 9.8 — affiliator Oct 20 MEDI CVE-2024-6985 Lord of Large Language Models (LoLLMs) path... 4.4 0.1% lollms Oct 11 LOW CVE-2024-6971 Lord of Large Language Models (LoLLMs) Server... 3.4 0.0% lollms Oct 11 MEDI CVE-2024-47872 Gradio is an open-source Python package designed... 5.4 0.3% gradio Oct 10 CRIT CVE-2024-47871 Gradio is an open-source Python package designed... 9.1 0.1% gradio Oct 10 HIGH CVE-2024-47870 Gradio is an open-source Python package designed... 8.1 0.2% gradio Oct 10 LOW CVE-2024-47869 Gradio is an open-source Python package designed... 3.7 0.2% gradio Oct 10 HIGH CVE-2024-47868 Gradio is an open-source Python package designed... 7.5 0.2% gradio Oct 10 HIGH CVE-2024-47867 Gradio is an open-source Python package designed... 7.5 0.2% gradio Oct 10 MEDI CVE-2024-47168 Gradio is an open-source Python package designed... 4.3 0.2% gradio Oct 10 CRIT CVE-2024-47167 Gradio is an open-source Python package designed... 9.8 0.2% gradio Oct 10 MEDI CVE-2024-47166 Gradio is an open-source Python package designed... 5.3 0.2% gradio Oct 10 MEDI CVE-2024-47165 Gradio is an open-source Python package designed... 5.4 0.2% gradio Oct 10 MEDI CVE-2024-47164 Gradio is an open-source Python package designed... 6.5 0.2% gradio Oct 10 HIGH CVE-2024-47084 Gradio is an open-source Python package designed... 8.3 0.1% gradio Oct 10 MEDI CVE-2024-7041 open-webui Insecure Direct Object Reference... 6.5 0.1% open-webui Oct 9 MEDI CVE-2024-7037 open-webui allows writing and deleting arbitrary... 6.5 2.3% open-webui Oct 9 LOW CVE-2024-7038 open-webui allows enumeration of file names and... 2.7 0.2% open-webui Oct 9 MEDI CVE-2024-9277 A vulnerability classified as problematic was... 6.5 0.2% langflow Sep 27 HIGH CVE-2024-7714 The AI ChatBot with ChatGPT and Content Generator... 7.5 — — Sep 27 MEDI CVE-2024-6845 The Chatbot with ChatGPT WordPress plugin before... 5.3 — — Sep 25 CRIT CVE-2024-46946 langchain_experimental (aka LangChain... 9.8 — langchain-experimental Sep 19 MEDI CVE-2024-8939 A vulnerability was found in the ilab model serve... 6.2 — — Sep 17 HIGH CVE-2024-8768 A flaw was found in the vLLM library. A... 7.5 — — Sep 17 HIGH CVE-2024-5998 A vulnerability in the... 7.8 — langchain Sep 17 HIGH CVE-2024-6587 A Server-Side Request Forgery (SSRF)... 7.5 — litellm Sep 13 HIGH CVE-2024-45848 An arbitrary code execution vulnerability exists... 8.8 — — Sep 12 HIGH CVE-2024-45436 extractFromZipFile in model.go in Ollama before... 7.5 — ollama Aug 29 MEDI CVE-2024-42474 Streamlit is a data oriented application... 6.5 — streamlit Aug 12 HIGH CVE-2023-33976 TensorFlow is an end-to-end open source platform... 7.5 — tensorflow Jul 30 HIGH CVE-2024-7297 Langflow versions prior to 1.0.13 suffer from a... 8.8 — langflow Jul 30 CRIT CVE-2024-41120 streamlit-geospatial is a streamlit multipage app... 9.8 — streamlit-geospatial Jul 26 CRIT CVE-2024-41119 streamlit-geospatial is a streamlit multipage app... 9.8 — streamlit-geospatial Jul 26 CRIT CVE-2024-41118 streamlit-geospatial is a streamlit multipage app... 9.8 — streamlit-geospatial Jul 26 CRIT CVE-2024-41117 streamlit-geospatial is a streamlit multipage app... 9.8 — streamlit-geospatial Jul 26 CRIT CVE-2024-41116 streamlit-geospatial is a streamlit multipage app... 9.8 — streamlit-geospatial Jul 26 Need deeper analysis?
Get ATLAS technique mappings, compliance reports (ISO 42001, EU AI Act), breaking alerts, and full CISO analysis with a Pro subscription.
Start 14-Day Free Trial