20529 matches found
CVE-2026-49468 LiteLLM: Authentication Bypass via Host Header Injection
LiteLLM is a proxy server AI Gateway to call LLM APIs in OpenAI or native format. Prior to 1.84.0, a Host-header parsing flaw in the LiteLLM proxy could, under specific conditions, allow unauthenticated access to protected management routes. The auth layer derived the effective route from...
keras-eval (>=0.0.4, <=0.0.8), keras-model-specs (>=0.0.17, <=0.0.24) +3 more potentially affected by CVE-2026-12479 via keras (2.1.4)
keras PYPI version 2.1.4 is affected by a known vulnerability. The following packages have a transitive dependency on keras and may be impacted: - keras-eval =0.0.4, =0.0.17, =0.0.21, =0.1.2, =0.5.2 Source cves: CVE-2026-12479 Source advisory: OSV:GHSA-GH82-F9X8-5FRX...
Keras: DiskIOStore permits path traversal through crafted layer names
A path traversal vulnerability exists in keras-team/keras version 3.14.0, specifically in the DiskIOStore.make method within the Keras 3 model saving and loading library. This vulnerability arises from the improper handling of user-provided layer names, which are used to construct directory paths...
gesture-classifying-model (>=0.1.2, <=0.1.3) potentially affected by CVE-2026-12479 via keras (1.2.2)
keras PYPI version 1.2.2 is affected by a known vulnerability. The following packages have a transitive dependency on keras and may be impacted: - gesture-classifying-model =0.1.2, =0.1.3 Source cves: CVE-2026-12479 Source advisory: OSV:GHSA-GH82-F9X8-5FRX...
EUVD-2026-38332
LangChain is a framework for building agents and LLM-powered applications. Prior to 1.3.9, several LangChain components that resolve filesystem paths or expand search patterns do not consistently confine the resolved path to the intended root directory. Affected behaviors include: a file-search...
MINI-85RC-XJJR-M28X
Bulletin has no description...
MINI-Q58C-458R-FF7M
Bulletin has no description...
MINI-Q585-GQ5X-W2QC
Bulletin has no description...
MINI-WXR3-FRX2-FJGG
Bulletin has no description...
MINI-PX5F-74J5-P28J
Bulletin has no description...
MINI-MQ5G-PG6W-RPX2
Bulletin has no description...
MINI-QCW3-X846-PH36
Bulletin has no description...
MINI-434F-99MX-3HXX
Bulletin has no description...
MINI-573V-H8QX-35VP
Bulletin has no description...
MINI-FW4P-M2J6-5V3H
Bulletin has no description...
MINI-V2PF-R823-4QJF
Bulletin has no description...
MINI-544W-VRMV-G3FR
Bulletin has no description...
MINI-352P-XP5F-23GM
Bulletin has no description...