Spring AI with Ollama Tool Support

Earlier this week, Ollama introduced an exciting new feature: tool support for Large Language Models LLMs. Today, we're thrilled to announce that Spring AI 1.0.0-SNAPSHOT has fully embraced this powerful feature, bringing Ollama's function calling capabilities to the Spring ecosystem. Ollama's to...

cobras (>=2.1.8, <=2.2.4), example-pkg-in8utils (0.0.1) +3 more potentially affected by CVE-2024-40647 via sentry-sdk (0.12.3)

sentry-sdk PYPI version 0.12.3 is affected by a known vulnerability. The following packages have a transitive dependency on sentry-sdk and may be impacted: - cobras =2.1.8, =1.0.0, =1.0.43 Source cves: CVE-2024-40647 Source advisory: OSV:GHSA-G92J-QHMH-64V2...

CVE-2024-39497 drm/shmem-helper: Fix BUG_ON() on mmap(PROT_WRITE, MAP_PRIVATE)

In the Linux kernel, the following vulnerability has been resolved: drm/shmem-helper: Fix BUGON on mmapPROTWRITE, MAPPRIVATE Lack of check for copy-on-write COW mapping in drmgemshmemmmap allows users to call mmap with PROTWRITE and MAPPRIVATE flag causing a kernel panic due to BUGON in...

Spring AI - Groq AI inference

Faster information processing not only inform—it transforms how we perceive and innovate. Spring AI, a powerful framework for integrating AI capabilities into Spring applications, now offers support for Groq - a blazingly fast AI inference engine with supports for Tool/Function calling. Because...

phonenumber: panic on parsing crafted phonenumber inputs

Impact The phonenumber parsing code may panic due to a reachable assert! guard on the phonenumber string. In a typical deployment of rust-phonenumber, this may get triggered by feeding a maliciously crafted phonenumber, e.g. over the network, specifically strings of the form...

Exploit for Race Condition in Openbsd Openssh

SSH Vulnerability Scanner The SSH Vulnerability Scanner is a...

MAL-2024-5335 Malicious code in lucifer-example-0 (PyPI)

--- -= Per source details. Do not edit below this line.=-...

Malicious code in lucifer-example-0 (PyPI)

--- -= Per source details. Do not edit below this line.=-...

Malicious code in example-helpers (npm)

--- -= Per source details. Do not edit below this line.=-...

MAL-2024-2349 Malicious code in example-helpers (npm)

--- -= Per source details. Do not edit below this line.=-...

Malicious code in example-arc-server-request-local (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis f47e48a4969642e3e6ab7d39b5d8f25a7a6d7acf2bbeec054888cfeada839219 The OpenSSF Package Analysis project identified 'example-arc-server-request-local' @ 100.0.1 npm as malicious. It is considered malicious becaus...

MAL-2024-2348 Malicious code in example-arc-server-request-local (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis f47e48a4969642e3e6ab7d39b5d8f25a7a6d7acf2bbeec054888cfeada839219 The OpenSSF Package Analysis project identified 'example-arc-server-request-local' @ 100.0.1 npm as malicious. It is considered malicious becaus...

Malicious code in example-arc-server (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 313fe2f7f49471a9351eff38bafe5bf3968444661867230198924b55a3e94909 The OpenSSF Package Analysis project identified 'example-arc-server' @ 100.0.2 npm as malicious. It is considered malicious because: - The packa...

MAL-2024-2347 Malicious code in example-arc-server (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 313fe2f7f49471a9351eff38bafe5bf3968444661867230198924b55a3e94909 The OpenSSF Package Analysis project identified 'example-arc-server' @ 100.0.2 npm as malicious. It is considered malicious because: - The packa...

MAL-2024-1842 Malicious code in browserstack-docker-example (npm)

--- -= Per source details. Do not edit below this line.=-...

Malicious code in browserstack-docker-example (npm)

--- -= Per source details. Do not edit below this line.=-...

apache-liminal (>=0.0.1.post1, <=0.0.3.post1), apache-liminal-test-spark (0.0.0) +4 more potentially affected by CVE-2024-25142 via apache-airflow (1.10.12)

apache-airflow PYPI version 1.10.12 is affected by a known vulnerability. The following packages have a transitive dependency on apache-airflow and may be impacted: - apache-liminal =0.0.1.post1, =0.0.1, =6.0.0, =0.1.0, =0.5.0a9, =0.6.0a15 Source cves: CVE-2024-25142 Source advisory:...

chicksexer (0.2.2), example-jpromero-2017 (>=0.0.1, <=0.1.3) +11 more potentially affected by CVE-2024-5206 via scikit-learn (0.18.1)

scikit-learn PYPI version 0.18.1 is affected by a known vulnerability. The following packages have a transitive dependency on scikit-learn and may be impacted: - chicksexer 0.2.2 - example-jpromero-2017 =0.0.1, =0.1.3, =0.0.3, =0.0.1, =1.0.0, =0.1.0, =0.1.0, =0.1.1 Source cves: CVE-2024-5206 Sour...

Exploit for Deserialization of Untrusted Data in Apache Activemq

Resumen Técnico del Ataque: CVE-2023-46604 El script explota un...

PT-2024-40322 · Silverstripe · Silverstripe/Framework

Name of the Vulnerable Software and Affected Versions: silverstripe/framework affected versions not specified Description: The issue concerns an XSS vulnerability in the Page name of silverstripe/framework. It can be triggered by a payload such as ", which results in an XSS alert. Recommendations...