Important: Red Hat Security Advisory: Red Hat AI Base Images 3.4.4 (Neuron)

Red Hat AI Base Images 3.4.4 Neuron is now available. Red Hat® AI Base Images...

Important: Red Hat Security Advisory: Red Hat AI Base Images 3.3.5 (Neuron)

Red Hat AI Base Images 3.3.5 Neuron is now available. Red Hat® AI Base Images...

Important: Red Hat Security Advisory: Red Hat AI Base Images 3.4.3 (Neuron)

Red Hat AI Base Images 3.4.3 Neuron is now available. Red Hat® AI Base Images...

Important: Red Hat Security Advisory: Red Hat AI Base Images 3.3.4 (Neuron)

Red Hat AI Base Images 3.3.4 Neuron is now available. Red Hat® AI Base Images...

Important: Red Hat Security Advisory: Red Hat AI Base Images 3.3.3 (Neuron)

Red Hat AI Base Images 3.3.3 Neuron is now available. Red Hat® AI Base Images...

exciton (>=2.5.3, <=2.9.3), invokeai (>=4.1.0, <=4.2.3) +2 more potentially affected by CVE-2026-69112 via accelerate (0.29.2)

accelerate PYPI version 0.29.2 is affected by a known vulnerability. The following packages have a transitive dependency on accelerate and may be impacted: - exciton =2.5.3, =4.1.0, =0.0.23, =0.2.2 - recis-gpu 1.0.0.dev1 Source cves: CVE-2026-69112 Source advisory: OSV:PYSEC-2026-3804...

ktransformers (>=0.0.1, <=0.2.1.post1), mlora (>=0.4.4, <=0.4.5) +2 more potentially affected by CVE-2026-9856 via transformers (4.43.2)

transformers PYPI version 4.43.2 is affected by a known vulnerability. The following packages have a transitive dependency on transformers and may be impacted: - ktransformers =0.0.1, =0.4.4, =0.0.25, =0.0.0, =0.0.2 Source cves: CVE-2026-9856 Source advisory: OSV:PYSEC-2026-3929...

exciton (>=2.5.3, <=2.9.3), invokeai (>=4.1.0, <=4.2.3) +2 more potentially affected by CVE-2026-69112 via accelerate (0.29.2)

accelerate PYPI version 0.29.2 is affected by a known vulnerability. The following packages have a transitive dependency on accelerate and may be impacted: - exciton =2.5.3, =4.1.0, =0.0.23, =0.2.2 - recis-gpu 1.0.0.dev1 Source cves: CVE-2026-69112 Source advisory: OSV:GHSA-4J2P-28Q2-5M79...

SparSEEty: Extracting Tokens from Sparsity-Exploiting LLM Serving Systems Via Deterministic Side Channels

Modern large language models LLMs exhibit activation sparsity, wherein only a subset of their neurons is activated for given input tokens. Researchers have leveraged this property to optimize LLM serving systems by omitting weight accesses and computations pertaining to inactive neurons...

ktransformers (>=0.0.1, <=0.2.1.post1), mlora (>=0.4.4, <=0.4.5) +2 more potentially affected by CVE-2026-9856 via transformers (4.43.2)

transformers PYPI version 4.43.2 is affected by a known vulnerability. The following packages have a transitive dependency on transformers and may be impacted: - ktransformers =0.0.1, =0.4.4, =0.0.25, =0.0.0, =0.0.2 Source cves: CVE-2026-9856 Source advisory: OSV:GHSA-XRQW-3RRV-VX5W...

Which Neurons Detect Malicious Code? A Probing Study of LLM Security Knowledge

Background. Large language models LLMs have become increasingly capable of understanding and generating source code, leading to their widespread adoption in software engineering tasks such as code completion, repair, and vulnerability detection. However, despite their strong empirical performance...

Neuron Golem OEE MES path traversal vulnerability

Neuron Golem OEE MES is a manufacturing execution system and equipment integrated efficiency management platform developed by the Polish company Neuron. The Neuron Golem OEE MES has a path traversal vulnerability, which stems from a path traversal flaw. This vulnerability could allow attackers...

ktransformers (>=0.0.1, <=0.2.1.post1), mlora (>=0.4.4, <=0.4.5) +2 more potentially affected by CVE-2026-5241 via transformers (4.43.2)

transformers PYPI version 4.43.2 is affected by a known vulnerability. The following packages have a transitive dependency on transformers and may be impacted: - ktransformers =0.0.1, =0.4.4, =0.0.25, =0.0.0, =0.0.2 Source cves: CVE-2026-5241 Source advisory: OSV:PYSEC-2026-2290...

ktransformers (>=0.0.1, <=0.2.1.post1), mlora (>=0.4.4, <=0.4.5) +2 more potentially affected by CVE-2026-4372 via transformers (4.43.2)

transformers PYPI version 4.43.2 is affected by a known vulnerability. The following packages have a transitive dependency on transformers and may be impacted: - ktransformers =0.0.1, =0.4.4, =0.0.25, =0.0.0, =0.0.2 Source cves: CVE-2026-4372 Source advisory: OSV:GHSA-29PF-2H5F-8G72...

ktransformers (>=0.0.1, <=0.2.1.post1), mlora (>=0.4.4, <=0.4.5) +2 more potentially affected by CVE-2026-4372 via transformers (4.43.2)

transformers PYPI version 4.43.2 is affected by a known vulnerability. The following packages have a transitive dependency on transformers and may be impacted: - ktransformers =0.0.1, =0.4.4, =0.0.25, =0.0.0, =0.0.2 Source cves: CVE-2026-4372 Source advisory: OSV:PYSEC-2026-2289...

ktransformers (>=0.0.1, <=0.2.1.post1), mlora (>=0.4.4, <=0.4.5) +2 more potentially affected by CVE-2026-1839 via transformers (4.43.2)

transformers PYPI version 4.43.2 is affected by a known vulnerability. The following packages have a transitive dependency on transformers and may be impacted: - ktransformers =0.0.1, =0.4.4, =0.0.25, =0.0.0, =0.0.2 Source cves: CVE-2026-1839 Source advisory: OSV:GHSA-69W3-R845-3855...

ktransformers (>=0.0.1, <=0.2.1.post1), mlora (>=0.4.4, <=0.4.5) +2 more potentially affected by CVE-2026-1839 via transformers (4.43.2)

transformers PYPI version 4.43.2 is affected by a known vulnerability. The following packages have a transitive dependency on transformers and may be impacted: - ktransformers =0.0.1, =0.4.4, =0.0.25, =0.0.0, =0.0.2 Source cves: CVE-2026-1839 Source advisory: OSV:PYSEC-2026-2288...

GoodVibe: Security-By-Vibe for LLM-Based Code Generation

Large language models LLMs are increasingly used for code generation in fast, informal development workflows, often referred to as vibe coding, where speed and convenience are prioritized, and security requirements are rarely made explicit. In this setting, models frequently produce functionally...

ktransformers (>=0.0.1, <=0.2.1.post1), mlora (>=0.4.4, <=0.4.5) +2 more potentially affected by CVE-2025-14929 via transformers (4.43.2)

transformers PYPI version 4.43.2 is affected by a known vulnerability. The following packages have a transitive dependency on transformers and may be impacted: - ktransformers =0.0.1, =0.4.4, =0.0.25, =0.0.0, =0.0.2 Source cves: CVE-2025-14929 Source advisory: OSV:PYSEC-2025-217...

CVE-2025-67509

Neuron is a PHP framework for creating and orchestrating AI Agents. Versions 2.8.11 and below use MySQLSelectTool, which is vulnerable to Read-Only Bypass. MySQLSelectTool is intended to be a read-only SQL tool e.g., for LLM agent querying, however, validation based on the first keyword e.g.,...