40 matches found
CVE-2026-2472-Vertex-AI-SDK-Google-Cloud
Cross-Site Scripting XSS Armazenado Não Autenticado em genai/evalsvisualization.py do Google Cloud Vertex AI SDK google-cloud-aiplatform nas versões de 1.98.0 até mas não incluindo 1.131.0 - github.com/googleapis/python-aiplatform Autor: Joshua Provoste Pesquisador e Desenvolvedor de N-day...
fbconsulting_v0_chat
Chat SDK Chat SDK è un template gratuito e open-source creato con Next.js e l'AI SDK che ti aiuta a creare rapidamente potenti applicazioni chatbot. Leggi la Documentazione · Funzionalità · Provider di Modelli · Distribuisci il Tuo · Esecuzione Locale Funzionalità Next.js App Router Routing...
CVE-2026-2472-Vertex-AI-SDK-Google-Cloud
🚨 CVE-2026-2472-Vertex-AI-SDK-Google-Cloud - Semplice strumento di proof of concept 🛠 Informazioni su questa applicazione Questo strumento mostra una proof of concept PoC tecnica per il problema di sicurezza CVE-2026-2472. Il problema riguarda l'SDK Python Vertex AI di Google Cloud Platform. È...
MAL-2026-11781 Malicious code in @picsart/ai-sdk (npm)
npm/@picsart/ai-sdk is affected by the large-scale, self-propagating npm supply-chain worm of 2026-08-04 the "Shai-Hulud: Here We Go Again" wave — the same campaign that began with the compromise of the keyv and cacheable maintainer account. The listed versions were trojanized and republished by...
@mcpjam/inspector (>=2.22.0, <=2.39.0) potentially affected by CVE-2026-64650 via @ai-sdk/harness-codex (1.0.0-canary.9)
@ai-sdk/harness-codex NPM version 1.0.0-canary.9 is affected by a known vulnerability. The following packages have a transitive dependency on @ai-sdk/harness-codex and may be impacted: - @mcpjam/inspector =2.22.0, =2.39.0 Source cves: CVE-2026-64650 Source advisory:...
PYSEC-2026-2499 Google Cloud Vertex AI SDK affected by Stored Cross-Site Scripting (XSS)
Stored Cross-Site Scripting XSS in the genai/evalsvisualization component of Google Cloud Vertex AI SDK google-cloud-aiplatform versions from 1.98.0 up to but not including 1.131.0 allows an unauthenticated remote attacker to execute arbitrary JavaScript in a victim's Jupyter or Colab environment...
MAL-2026-5939 Malicious code in @mastra/ai-sdk (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 98257d70b56e46a3dcd690478b15c54fb55c270db969b777c0cb42bec21ace37 The package was found to contain malicious code or consuming dependency that contains malicious code Source: ghsa-malware...
MAL-2026-5565 Malicious code in ai-sdk-helpers (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 501daa3c8b2c9c2609dc60fd90ae59710a603ae56fa5dcc867d24913889c5413 [email protected] is a typosquat impersonating the Vercel AI SDK ecosystem homepage ai-sdk.guide, author 'AI SDK Guide '. On npm install,...
Malicious code in ai-sdk-ollama (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 19f3e848ffd678e29b96aec1a0aa02dcdcb7c3c5f58bc357ee3b3483b395577d The package was found to contain malicious code or consuming dependency that contains malicious code Source: ghsa-malware...
Embedded Malicious Code
Overview ai-sdk-ollama is a Vercel AI SDK Provider for Ollama using official ollama-js library Affected versions of this package are vulnerable to Embedded Malicious Code containing a malicious binding.gyp file that drops and runs a self-propagating cloud secret stealer. The malicious code attemp...
AI SDK 命令注入漏洞
AI SDK is a TypeScript AI toolkit open-sourced by Vercel. Versions of AI SDK 3.0.97 and earlier have a command injection vulnerability. This vulnerability stems from the run function in the PR Branch Name Interpolation component, where operating system commands can be injected, potentially allowi...
Vercel AI SDK 资源管理错误漏洞
Vercel AI SDK is a JavaScript SDK provided by Vercel that supports the integration of large language models, streaming responses, and AI application development. Vercel AI SDK versions 3.0.97 and earlier contain a resource management vulnerability. This vulnerability stems from the functions...
Vercel AI SDK 代码问题漏洞
Vercel AI SDK is a JavaScript SDK developed by Vercel that supports the integration of large language models, streaming responses, and AI application development. Versions of Vercel AI 3.0.97 and earlier contain code vulnerabilities. These vulnerabilities stem from the validateDownloadUrl functio...
Malicious code in @dirigible-ai/sdk (npm)
--- -= Per source details. Do not edit below this line.=- Source: google-open-source-security 5e1924464368f0c5816ee84e000cc47017f44045140feafbbc9e685d847ed5a5 This package was compromised as part of the "Mini Shai-Hulud is back" worm by the TeamPCP threat actor. The package will steal credentials...
MAL-2026-3593 Malicious code in @dirigible-ai/sdk (npm)
--- -= Per source details. Do not edit below this line.=- Source: google-open-source-security 5e1924464368f0c5816ee84e000cc47017f44045140feafbbc9e685d847ed5a5 This package was compromised as part of the "Mini Shai-Hulud is back" worm by the TeamPCP threat actor. The package will steal credentials...
3am-cli (0.1.0), 3am-diagnosis (0.1.0) +1442 more potentially affected by CVE-2026-41686 via @anthropic-ai/sdk (>=0.79.0, <=0.91.0)
@anthropic-ai/sdk NPM version =0.79.0, =0.5.0, =0.1.0, =1.0.0-alpha, =0.8.4, =0.1.8, =5.0.0, =5.0.0, =0.1.0, =1.3.0-canary.26.1, =1.3.0-canary.26.1, =1.3.0-canary.26.1, =1.6.3 - @adaptic/backend-legacy 0.0.941 and more Source cves: CVE-2026-41686 Source advisory: OSV:GHSA-P7FG-763F-G4GF...
3am-cli (0.1.0), 3am-diagnosis (0.1.0) +1442 more potentially affected by CVE-2026-41686 via @anthropic-ai/sdk (>=0.79.0, <=0.91.0)
@anthropic-ai/sdk NPM version =0.79.0, =0.5.0, =0.1.0, =1.0.0-alpha, =0.8.4, =0.1.8, =5.0.0, =5.0.0, =0.1.0, =1.3.0-canary.26.1, =1.3.0-canary.26.1, =1.3.0-canary.26.1, =1.6.3 - @adaptic/backend-legacy 0.0.941 and more Source cves: CVE-2026-41686 Source advisory: SNYK:JS-ANTHROPICAISDK-16322960...
@adaptic/backend-legacy (0.0.941), @adaptic/lumic-utils (>=1.0.8, <=1.0.35) +321 more potentially affected by CVE-2026-34451 via @anthropic-ai/sdk (>=0.79.0, <=0.80.0)
@anthropic-ai/sdk NPM version =0.79.0, =1.0.8, =0.0.99, =1.0.0, =1.2.2, =0.4.2, =0.25.0, =1.0.0, =1.3.0, =0.0.0, =0.0.0, =0.1.0, =0.100.0, =0.2.91, =2026.5.19-1, =2026.5.21 and more Source cves: CVE-2026-34451 Source advisory: SNYK:JS-ANTHROPICAISDK-15907874...
@adaptic/backend-legacy (0.0.941), @adaptic/lumic-utils (>=1.0.8, <=1.0.35) +321 more potentially affected by CVE-2026-34451 via @anthropic-ai/sdk (>=0.79.0, <=0.80.0)
@anthropic-ai/sdk NPM version =0.79.0, =1.0.8, =0.0.99, =1.0.0, =1.2.2, =0.4.2, =0.25.0, =1.0.0, =1.3.0, =0.0.0, =0.0.0, =0.1.0, =0.100.0, =0.2.91, =2026.5.19-1, =2026.5.21 and more Source cves: CVE-2026-34451 Source advisory: OSV:GHSA-5474-4W2J-MQ4C...
