Why AI Demands a New Security Playbook

Understand the new AI security threats and how Akamai can help you develop a risk mitigation strategy...

CVE-2024-13903

A flaw was found in QuickJS-ng. This vulnerability allows a stack-based buffer overflow via manipulation of the JSGetRuntime function in the quickjs.c file of the qjs component. Mitigation Mitigation for this issue is either not available or the currently available options do not meet the Red Hat...

CVE-2024-10940

A flaw was found in Langchain Core. This vulnerability allows unauthorized users to read arbitrary files from the host file system by creating ImagePromptTemplate or ChatPromptTemplate with input variables that can access any user-specified path on the server. Mitigation Mitigation for this issue...

CVE-2025-2584

A flaw was found in WebAssembly wabt. This vulnerability allows a heap-based buffer overflow via a manipulated function. Mitigation Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and...

CVE-2025-0315

A flaw was found in Ollama. This vulnerability allows a malicious user to create a customized GGUF model file, upload it to the Ollama server, and create it. This can cause the server to allocate unlimited memory, leading to a denial of service DoS attack via specially crafted GGUF model files...

CVE-2025-0313

A flaw was found in Ollama. This vulnerability allows a malicious user to cause a denial of service DoS attack via improper validation of array index bounds in the GGUF model handling code, which can be exploited remotely over a network. Mitigation Mitigation for this issue is either not availabl...

CVE-2024-7598

A flaw was found in Kubernetes. This vulnerability can allow a malicious or compromised pod to bypass network restrictions via the deletion of network policies before pod termination during namespace deletion. Mitigation Mitigation for this issue is either not available or the currently available...

CVE-2025-0312

A flaw was found in Ollama. This vulnerability allows a malicious user to create a customized GGUF model file that, when uploaded and processed on the Ollama server, causes a crash due to an unchecked null pointer dereference. This issue can lead to a denial of service DoS attack via a remote...

CVE-2024-7773

A flaw was found in Ollama, specifically in the parseFromZipFile function in server/model.go. This vulnerability allows remote code execution RCE via improper input validation when handling zip files, enabling directory traversal attacks ../ that allow an attacker to write arbitrary files to the...

CVE-2025-2574

A flaw was found in Xpdf. This vulnerability may allow out-of-bounds array write caused by incorrect integer overflow checking in the PostScript function interpreter code. Mitigation Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Produ...

CVE-2025-29923

go-redis is the official Redis client library for the Go programming language. Prior to 9.5.5, 9.6.3, and 9.7.3, go-redis potentially responds out of order when CLIENT SETINFO times out during connection establishment. This can happen when the client is configured to transmit its identity, there...

CVE-2025-2581

A flaw was found in XMedCon. This vulnerability allows an attacker to trigger an integer underflow via manipulating the malloc function, potentially leading to memory corruption or denial of service. The attack can be launched remotely. Mitigation Mitigation for this issue is either not available...

CVE-2025-30346

A flaw was found in Varnish Cache and Varnish Enterprise. This vulnerability allows client-side desynchronization via crafted HTTP/1 requests. Mitigation Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprisi...

CVE-2024-12910

A flaw was found in the run-llama/llamaindex repository. This vulnerability allows an attacker to cause a denial of service DoS by controlling a URL variable to contain the root URL, leading to infinite recursive calls to the getarticleurls method and exhausting system resources. Mitigation...

CVE-2024-10096

A flaw was found in the Dask Distributed Server. This vulnerability allows remote code execution via pickle serialization, enabling attackers to craft and send malicious objects for deserialization on the server. Mitigation Mitigation for this issue is either not available or the currently...

CVE-2024-12911

A flaw was found in the run-llama/llamaindex repository. This vulnerability allows arbitrary file creation and denial of service DoS attacks via SQL injection through prompt injection. Mitigation Mitigation for this issue is either not available or the currently available options do not meet the...

CVE-2024-6866

A flaw was found in flask-cors. This vulnerability allows unauthorized origins to access restricted paths, leading to potential data exposure and leaks via case-insensitive request path matching due to improper use of the trymatch function. Mitigation Mitigation for this issue is either not...

CVE-2024-6844

A flaw was found in Flask-CORS. This vulnerability allows unauthorized cross-origin access or improper request blocking via incorrect handling of the '+' character in URL paths, leading to an inconsistent CORS policy application. Mitigation Mitigation for this issue is either not available or the...

CVE-2024-6839

A flaw was found inflask-cors. This vulnerability allows unauthorized cross-origin access to sensitive data or functionality via improper regex path matching, prioritizing longer patterns over more specific ones. This issue leads to less restrictive CORS policies being applied to sensitive...

PYSEC-2025-92

An unauthenticated Denial of Service DoS vulnerability was identified in ChuanhuChatGPT version 20240918, which could be exploited by sending large data payloads using a multipart boundary. Although a patch was applied for CVE-2024-7807, the issue can still be exploited by sending data in groups...