Sleeping Secrets: How Fine-Tuning Reawakens Privacy Risks in Language Models

Beyond adapting Large Language Models LLMs to specialized applications, fine-tuning has recently been shown to recover private information that is no longer accessible through direct queries. Previous fine-tuning recovery attacks, however, require genuine private supervision drawn from the same...

The Innocent Courier: Covert Exfiltration through Legitimate LLM Web Fetching

With the increasing capabilities of Large-Language-Models LLMs and LLM-based agents, users are increasingly using them to solve everyday problems, such as answering e-mails or providing programming support. Existing work has extensively investigated security and privacy risks, such as prompt...

CLEANSTART-2024-AG66831 regex is an implementation of regular expressions for the Rust language

CVE-2022-24713 affects multiple packages. regex is an implementation of regular expressions for the Rust language. See references for individual vulnerability details...

Do Defenses against LLM Extraction Work across Attacks? A Lifecycle Benchmark of Black-Box Model Extraction

Large language models LLMs deployed through text-only APIs face model extraction risks, as adversaries can collect their responses to train surrogates that reproduce their capabilities. While prior work has developed diverse attacks and defenses, evaluations remain fragmented across access...

Towards Hierarchical Cyber Defense with Large Language Models: From Planning to Execution

An autonomous cyber defender trained with reinforcement learning RL is typically tied to the network on which it was trained, limiting its ability to generalize as network scale changes. Hierarchical RL reduces decision complexity by separating strategic targeting from tactical execution, but it...

Linux Distros Unpatched Vulnerability : CVE-2026-102830

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - JupyterLab is an extensible environment for interactive and reproducible computing, based on the Jupyter Notebook Architecture. From JupyterLab 3.0.0 until 4.5....

Exploiting Vulnerabilities: Universal Adversarial Attacks on Vision-Language-Action Models in Robotics

Recently, Vision-Language-Action VLA models have revolutionized robotic manipulation by seamlessly integrating visual perception, language understanding, and action generation in an end-to-end learning framework. However, since these models are designed to interact directly with the physical worl...

CVE-2026-87830: Improper Neutralization of Special Elements used in an Expression Language Statement

In the StAX streaming WS-SecurityPolicy validator, certain relative or unsupported XPath expressions can be converted into paths that never match the actual XML element path. A remote SOAP peer may therefore send a required element without the expected signature or encryption. Users are recommend...

CVE-2026-84292 vulnerabilities

Vulnerabilities for packages: keep, wazuh-dashboard-fips, nextcloud-server, unleash, wazuh-dashboard, gitlab-rails-ce, jupyter-base-notebook, serve, yaml-language-server, prism, opensearch-dashboards, gitlab-rails-ce-fips, vitess, renovate, keep-fips, unleash-proxy...

GHSA-58MR-GQGX-XQ4G vulnerabilities

Vulnerabilities for packages: keep, wazuh-dashboard-fips, nextcloud-server, unleash, wazuh-dashboard, gitlab-rails-ce, serve, yaml-language-server, prism, opensearch-dashboards, gitlab-rails-ce-fips, vitess, renovate, keep-fips, unleash-proxy...

GHSA-QW65-CVWX-89V3 vulnerabilities

Vulnerabilities for packages: keep, wazuh-dashboard-fips, nextcloud-server, unleash, wazuh-dashboard, gitlab-rails-ce, jupyter-base-notebook, serve, yaml-language-server, prism, opensearch-dashboards, gitlab-rails-ce-fips, vitess, renovate, keep-fips, unleash-proxy...

CVE-2026-84394 vulnerabilities

Vulnerabilities for packages: keep, wazuh-dashboard-fips, nextcloud-server, unleash, wazuh-dashboard, gitlab-rails-ce, serve, yaml-language-server, prism, opensearch-dashboards, gitlab-rails-ce-fips, vitess, renovate, keep-fips, unleash-proxy...

CVE-2026-84292 vulnerabilities

Vulnerabilities for packages: yaml-language-server, jupyter-base-notebook, prism, renovate, serve, opensearch-dashboards, vitess...

GHSA-QW65-CVWX-89V3 vulnerabilities

Vulnerabilities for packages: yaml-language-server, jupyter-base-notebook, prism, renovate, serve, opensearch-dashboards, vitess...

GHSA-58MR-GQGX-XQ4G vulnerabilities

Vulnerabilities for packages: yaml-language-server, prism, renovate, serve, opensearch-dashboards, vitess...

CVE-2026-84394 vulnerabilities

Vulnerabilities for packages: yaml-language-server, prism, renovate, serve, opensearch-dashboards, vitess...

CVE-2026-102830

A flaw was found in JupyterLab. Incomplete validation of language pack headers allows arbitrary JavaScript code to be injected and executed during string translation. An attacker could exploit this flaw by enticing a user to load a malicious third-party language pack, resulting in code execution...

CVE-2026-102830

A vulnerability in JupyterLab (versions 3.0.0 through 4.5.11 and 4.6.4) and JupyterLite Core (0.8.3 and earlier) allows for the execution of arbitrary JavaScript. The root cause is a prefix-only regular-expression validation in the Plural-Forms header of certain third-party language packs, which ...

CVE-2026-102830 JupyterLab: Cross-site scripting (XSS) in JupyterLab via crafted language package (jupyterlab.json)

JupyterLab is an extensible environment for interactive and reproducible computing, based on the Jupyter Notebook Architecture. From JupyterLab 3.0.0 until 4.5.11 and 4.6.4, and in JupyterLite Core 0.8.3 and earlier, the Plural-Forms header in a selected third-party language pack can append...

CVE-2026-102570

ClipBucket v5 through 5.5.3-197 contains a time-based blind SQL injection vulnerability in the language update function where the languageid parameter is concatenated unescaped into the WHERE clause of an UPDATE statement. An authenticated administrator with basicsettings permission can inject...