Learning-to-Detect

Learning to Detect Unknown Jailbreak Attacks in Large Vision-Language Models Official implementation of “Learning to Detect Unknown Jailbreak Attacks in Large Vision-Language Models.” This repository contains the data-processing, hidden-state extraction, classifier training, safety-pattern...

apillava (0.1.0), find-anything (>=1.2.0, <=1.3.0) +4 more potentially affected by CVE-2024-12217 via gradio (3.35.2)

gradio PYPI version 3.35.2 is affected by a known vulnerability. The following packages have a transitive dependency on gradio and may be impacted: - apillava 0.1.0 - find-anything =1.2.0, =0.2.16, =1.0.2, =0.1.1, =0.1.2 Source cves: CVE-2024-12217 Source advisory: OSV:PYSEC-2026-1418...

apillava (0.1.0), find-anything (>=1.2.0, <=1.3.0) +4 more potentially affected by CVE-2024-4325 via gradio (3.35.2)

gradio PYPI version 3.35.2 is affected by a known vulnerability. The following packages have a transitive dependency on gradio and may be impacted: - apillava 0.1.0 - find-anything =1.2.0, =0.2.16, =1.0.2, =0.1.1, =0.1.2 Source cves: CVE-2024-4325 Source advisory: OSV:PYSEC-2026-1413...

apillava (0.1.0), find-anything (>=1.2.0, <=1.3.0) +4 more potentially affected by CVE-2024-2206 via gradio (3.35.2)

gradio PYPI version 3.35.2 is affected by a known vulnerability. The following packages have a transitive dependency on gradio and may be impacted: - apillava 0.1.0 - find-anything =1.2.0, =0.2.16, =1.0.2, =0.1.1, =0.1.2 Source cves: CVE-2024-2206 Source advisory: OSV:PYSEC-2026-1420...

apillava (0.1.0), find-anything (>=1.2.0, <=1.3.0) +4 more potentially affected by CVE-2024-1728 via gradio (3.35.2)

gradio PYPI version 3.35.2 is affected by a known vulnerability. The following packages have a transitive dependency on gradio and may be impacted: - apillava 0.1.0 - find-anything =1.2.0, =0.2.16, =1.0.2, =0.1.1, =0.1.2 Source cves: CVE-2024-1728 Source advisory: OSV:PYSEC-2026-345...

apillava (0.1.0), find-anything (>=1.2.0, <=1.3.0) +4 more potentially affected by CVE-2026-10783 via gradio (3.35.2)

gradio PYPI version 3.35.2 is affected by a known vulnerability. The following packages have a transitive dependency on gradio and may be impacted: - apillava 0.1.0 - find-anything =1.2.0, =0.2.16, =1.0.2, =0.1.1, =0.1.2 Source cves: CVE-2026-10783 Source advisory: OSV:GHSA-6655-8PH2-63J3...

apillava (0.1.0), find-anything (>=1.2.0, <=1.3.0) +4 more potentially affected by CVE-2026-48545 via gradio (3.35.2)

gradio PYPI version 3.35.2 is affected by a known vulnerability. The following packages have a transitive dependency on gradio and may be impacted: - apillava 0.1.0 - find-anything =1.2.0, =0.2.16, =1.0.2, =0.1.1, =0.1.2 Source cves: CVE-2026-48545 Source advisory: OSV:GHSA-7HP7-4P35-3CX2...

apillava (0.1.0), find-anything (>=1.2.0, <=1.3.0) +4 more potentially affected by CVE-2026-48545 via gradio (3.35.2)

gradio PYPI version 3.35.2 is affected by a known vulnerability. The following packages have a transitive dependency on gradio and may be impacted: - apillava 0.1.0 - find-anything =1.2.0, =0.2.16, =1.0.2, =0.1.1, =0.1.2 Source cves: CVE-2026-48545 Source advisory: OSV:PYSEC-2026-2178...

apillava (0.1.0), find-anything (>=1.2.0, <=1.3.0) +4 more potentially affected by CVE-2026-28416 via gradio (3.35.2)

gradio PYPI version 3.35.2 is affected by a known vulnerability. The following packages have a transitive dependency on gradio and may be impacted: - apillava 0.1.0 - find-anything =1.2.0, =0.2.16, =1.0.2, =0.1.1, =0.1.2 Source cves: CVE-2026-28416 Source advisory: OSV:GHSA-JMH7-G254-2CQ9...

apillava (0.1.0), find-anything (>=1.2.0, <=1.3.0) +4 more potentially affected by CVE-2026-28415 via gradio (3.35.2)

gradio PYPI version 3.35.2 is affected by a known vulnerability. The following packages have a transitive dependency on gradio and may be impacted: - apillava 0.1.0 - find-anything =1.2.0, =0.2.16, =1.0.2, =0.1.1, =0.1.2 Source cves: CVE-2026-28415 Source advisory: OSV:GHSA-PFJF-5GXR-995X...

apillava (0.1.0), find-anything (>=1.2.0, <=1.3.0) +4 more potentially affected by CVE-2026-28414 via gradio (3.35.2)

gradio PYPI version 3.35.2 is affected by a known vulnerability. The following packages have a transitive dependency on gradio and may be impacted: - apillava 0.1.0 - find-anything =1.2.0, =0.2.16, =1.0.2, =0.1.1, =0.1.2 Source cves: CVE-2026-28414 Source advisory: OSV:GHSA-39MP-8HJ3-5C49...

gradio-notebook (>=0.0.5, <=0.0.15), llava-torch (>=1.2.1.post4, <=1.2.2.post1) +3 more potentially affected by CVE-2026-28414 via gradio (4.16.0)

gradio PYPI version 4.16.0 is affected by a known vulnerability. The following packages have a transitive dependency on gradio and may be impacted: - gradio-notebook =0.0.5, =1.2.1.post4, =0.1.0, =0.0.1, =1.2.2.post1, =4.4.0 Source cves: CVE-2026-28414 Source advisory: OSV:GHSA-39MP-8HJ3-5C49...

apillava (0.1.0), find-anything (>=1.2.0, <=1.3.0) +4 more potentially affected by CVE-2026-28415 via gradio (3.35.2)

gradio PYPI version 3.35.2 is affected by a known vulnerability. The following packages have a transitive dependency on gradio and may be impacted: - apillava 0.1.0 - find-anything =1.2.0, =0.2.16, =1.0.2, =0.1.1, =0.1.2 Source cves: CVE-2026-28415 Source advisory: OSV:PYSEC-2026-65...

EUVD-2025-7038

Malicious code in bioql PyPI...

EUVD-2025-7023

Malicious code in bioql PyPI...

EUVD-2025-6870

Malicious code in bioql PyPI...

EUVD-2025-7027

Malicious code in bioql PyPI...

Con Instruction: Universal Jailbreaking of Multimodal Large Language Models Via Non-Textual Modalities

Existing attacks against multimodal language models MLLMs primarily communicate instructions through text accompanied by adversarial images. In contrast, we exploit the capabilities of MLLMs to interpret non-textual instructions, specifically, adversarial images or audio generated by our novel...

apillava (0.1.0), find-anything (>=1.2.0, <=1.3.0) +4 more potentially affected by CVE-2025-48889 via gradio (3.35.2)

gradio PYPI version 3.35.2 is affected by a known vulnerability. The following packages have a transitive dependency on gradio and may be impacted: - apillava 0.1.0 - find-anything =1.2.0, =0.2.16, =1.0.2, =0.1.1, =0.1.2 Source cves: CVE-2025-48889 Source advisory: OSV:GHSA-8JW3-6X8J-V96G...

CVE-2024-9308

An open redirect vulnerability in haotian-liu/llava version v1.2.0 LLaVA-1.6 allows a remote unauthenticated attacker to redirect users to arbitrary websites via a specially crafted URL. This can be exploited for phishing attacks, malware distribution, and credential theft...