aqueduct-llm (0.0.1), fschat (>=0.1.1, <=0.2.15) +3 more potentially affected by CVE-2024-47167 via gradio (3.23.0)

gradio PYPI version 3.23.0 is affected by a known vulnerability. The following packages have a transitive dependency on gradio and may be impacted: - aqueduct-llm 0.0.1 - fschat =0.1.1, =0.0.1, =0.0.16 Source cves: CVE-2024-47167 Source advisory: OSV:GHSA-576C-3J53-R9JJ...

aqueduct-llm (0.0.1), fschat (>=0.1.1, <=0.2.15) +3 more potentially affected by CVE-2024-47165 via gradio (3.23.0)

gradio PYPI version 3.23.0 is affected by a known vulnerability. The following packages have a transitive dependency on gradio and may be impacted: - aqueduct-llm 0.0.1 - fschat =0.1.1, =0.0.1, =0.0.16 Source cves: CVE-2024-47165 Source advisory: OSV:GHSA-89V2-PQFV-C5R9...

askdoc (0.1.1), chat-with-mlx (>=0.1.6, <=0.1.11) +1 more potentially affected by CVE-2024-47165 via gradio (4.19.2)

gradio PYPI version 4.19.2 is affected by a known vulnerability. The following packages have a transitive dependency on gradio and may be impacted: - askdoc 0.1.1 - chat-with-mlx =0.1.6, =0.1.11 - hugegraph-llm 1.3.0 Source cves: CVE-2024-47165 Source advisory: OSV:GHSA-89V2-PQFV-C5R9...

askdoc (0.1.1), chat-with-mlx (>=0.1.6, <=0.1.11) +1 more potentially affected by CVE-2024-47164 via gradio (4.19.2)

gradio PYPI version 4.19.2 is affected by a known vulnerability. The following packages have a transitive dependency on gradio and may be impacted: - askdoc 0.1.1 - chat-with-mlx =0.1.6, =0.1.11 - hugegraph-llm 1.3.0 Source cves: CVE-2024-47164 Source advisory: OSV:GHSA-77XQ-6G77-H274...

aqueduct-llm (0.0.1), fschat (>=0.1.1, <=0.2.15) +3 more potentially affected by CVE-2024-47084 via gradio (3.23.0)

gradio PYPI version 3.23.0 is affected by a known vulnerability. The following packages have a transitive dependency on gradio and may be impacted: - aqueduct-llm 0.0.1 - fschat =0.1.1, =0.0.1, =0.0.16 Source cves: CVE-2024-47084 Source advisory: OSV:GHSA-3C67-5HWX-F6WX...

llm-toys (0.1.1) potentially affected by CVE-2024-47532 via restrictedpython (6.1.0)

restrictedpython PYPI version 6.1.0 is affected by a known vulnerability. The following packages have a transitive dependency on restrictedpython and may be impacted: - llm-toys 0.1.1 Source cves: CVE-2024-47532 Source advisory: OSV:GHSA-5RFV-66G4-JR8H...

llm-toys (0.1.1) potentially affected by CVE-2024-47532 via restrictedpython (6.1.0)

restrictedpython PYPI version 6.1.0 is affected by a known vulnerability. The following packages have a transitive dependency on restrictedpython and may be impacted: - llm-toys 0.1.1 Source cves: CVE-2024-47532 Source advisory: OSV:PYSEC-2024-186...

aqueduct-llm (0.0.1), fschat (>=0.1.1, <=0.2.15) +3 more potentially affected by CVE-2024-1728 via gradio (3.23.0)

gradio PYPI version 3.23.0 is affected by a known vulnerability. The following packages have a transitive dependency on gradio and may be impacted: - aqueduct-llm 0.0.1 - fschat =0.1.1, =0.0.1, =0.0.16 Source cves: CVE-2024-1728 Source advisory: OSV:GHSA-M842-4QM8-7GPQ...

AI/LLM Claude Sonnet API Detection

Binary data 701487.prm...

AI/LLM Google Gemini API Detection

Binary data 701488.prm...

AI/LLM Bettybot Domain Detection

Binary data 701483.prm...

AI/LLM IBM watsonx Detection

Binary data 701486.prm...

AI/LLM Clarifai Detection

Binary data 701485.prm...

AI/LLM Matroid AI Detection

Binary data 701484.prm...

GHSA-WC36-9694-F9RF vLLM Denial of Service via the best_of parameter

A vulnerability was found in the ilab model serve component, where improper handling of the bestof parameter in the vllm JSON web API can lead to a Denial of Service DoS. The API used for LLM-based sentence or chat completion accepts a bestof parameter to return the best completion from several...

dsipts (>=1.1.5, <=1.1.19), llm-toys (0.1.1) +2 more potentially affected by CVE-2024-8863 via aim (>=3.17.4, <=3.20.1)

aim PYPI version =3.17.4, =1.1.5, =0.0.20, =0.1.0, =0.5.6 Source cves: CVE-2024-8863 Source advisory: GHSA-PMHG-F7WC-C97M...

ai.ancf.lmos-router:lmos-router-llm-in-spring-cloud-gateway-demo (0.2.0), ai.ancf.lmos:lmos-operator (>=0.0.4, <=0.1.0) +5127 more potentially affected by CVE-2024-38816 via org.springframework:spring-webmvc (>=6.1.0, <=6.1.12)

org.springframework:spring-webmvc MAVEN version =6.1.0, =0.0.4, =0.5.0, =0.6.0, =0.5.0, =0.7.0, =0.7.0, =0.5.0, =0.7.5, =0.8.3, =0.7.0, =0.5.0, =0.5.0, =0.9.2 and more Source cves: CVE-2024-38816 Source advisory: OSV:GHSA-CX7F-G6MP-7HQM...

AI/LLM Read.AI Detection

Binary data 701480.prm...

Malicious code in mlc-llm-nightly (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: kam193 bdf6d47b319cb60e32a6f2942beaa54bfe6ccc01bb72a8337f062746d49ace38 Generic campaign for all likely research / pentests, where the amount or art of collected data raises questions about the privacy, security and ethical side. -...

This Week in Spring - August 27th, 2024 - SpringOne 2024 edition

Hi, Spring fans, from the expo hall of SpringOne at VMware Explore 2024! There's a livestream of some of the key talks - register and watch for free now at SpringOne.io. Right now I'm hanging out at the expo hall manning a booth and doing demos to the hoardes of people streaming by, but I'll be...