AI/ML

🛡 関連する脆弱性 27

画像	ID	タイトル	重要度	検知
	CVE-2026-80298	Improper neutralization of special elements used in an SQL command ('SQL injection')...	High	2週間前
	CVE-2026-47852	A local attacker on a multi-user host can pre-create the deterministic cache path and plant a...	High	1ヶ月前
	CVE-2026-47851	Analyzing a PDF with a deeply nested or cyclic table of contents can cause a StackOverflowError...	High	1ヶ月前
	CVE-2026-72642	The native inference process that Elasticsearch uses to evaluate uploaded machine learning models...	High	2ヶ月前
	CVE-2026-72742	DSPy 3.3.0b1 contains a file exfiltration vulnerability in the Image and Audio output field...	High	2ヶ月前
	CVE-2026-71281	Hugging Face peft's LoRA-GA and CorDA initialization modules (src/peft/tuners/lora/corda.py lines...	High	2ヶ月前
	CVE-2026-67428	Flyto2 Core: Multiple HTTP-family modules fetch client-controlled URLs without the SSRF guard their siblings apply (SSRF to internal/metadata)	High	2ヶ月前
	CVE-2026-67425	Flyto2 Core: LLM/API keys leak to an attacker-controlled base_url	High	2ヶ月前
	CVE-2026-67427	Flyto2 Core: ${env.VAR} interpolation reads any env secret despite env.get being denylisted	High	2ヶ月前
	CVE-2026-12484	Keras: TorchModuleWrapper can deserialize unsafe PyTorch pickle data	High	2ヶ月前
	CVE-2026-7755	IBM Langflow OSS 1.0.0 through 1.10.0 Langflow could allow remote code execution due to...	High	2ヶ月前
	CVE-2026-12773	LiteLLM: MCP Proxy Has Improper Authentication	High	3ヶ月前
	CVE-2026-47749	stable-diffusion.cpp is a pure C/C++ library for running diffusion model (Stable Diffusion, Flux, Wan, Qwen Image, Z-Image, and more) inference. Versions prior to master-584-0a7ae07 are vulnerable to...	High	4ヶ月前
	CVE-2026-47835	CVE-2026-47835 の脆弱性 (CVE-2026-47835)	High	4ヶ月前
	CVE-2026-12191	deserialization の脆弱性 (CVE-2026-12191)	High	4ヶ月前
	CVE-2026-5497	vLLM is vulnerable to an Out-of-Memory (OOM) Denial of Service (DoS) attack due to unbounded frame count processing in the `VideoMediaIO.load_base64()` method	High	4ヶ月前
	CVE-2026-44285	FastGPT is an AI Agent building platform. Prior to 4.15.0-beta1, a Server-Side Request Forgery (SSRF) vulnerability allows an authenticated attacker to bypass the global isInternalAddress network prot...	High	4ヶ月前
	CVE-2026-30950	AutoGPT is a workflow automation platform for creating, deploying, and managing continuous artificial intelligence agents. Versions 0.6.36 through 0.6.50 are vulnerable to Authenticated Session Hijack...	High	4ヶ月前
	CVE-2026-2614	MLflow allows an unauthenticated remote attacker to read arbitrary files from the server's filesystem	High	5ヶ月前
	CVE-2026-42298	docker に コードインジェクション (CVE-2026-42298)	Critical	5ヶ月前
	CVE-2026-42302	openai-sdk の脆弱性 (CVE-2026-42302)	Critical	5ヶ月前
	CVE-2026-44336	praison の脆弱性 (CVE-2026-44336)	Critical	5ヶ月前
	CVE-2026-41512	gem に コードインジェクション (CVE-2026-41512)	Critical	5ヶ月前
	CVE-2026-41497	praison に コマンドインジェクション (CVE-2026-41497)	Critical	5ヶ月前
	CVE-2026-42208 KEV	【KEV】Berriai litellm に SQLインジェクション (CVE-2026-42208)	Critical	5ヶ月前
	CVE-2025-33213	NVIDIA Merlin Transformers4Rec for Linux に 安全でないデシリアライゼーション (CVE-2025-33213)	High	10ヶ月前
	CVE-2025-33214	NVIDIA NVTabular for Linux に 安全でないデシリアライゼーション (CVE-2025-33214)	High	10ヶ月前