MINI-V863-CM32-G69R

Bulletin has no description...

MINI-R824-5GRJ-GH98

Bulletin has no description...

MINI-PC27-73F6-6P4G

Bulletin has no description...

MINI-M63V-766W-MJG9

Bulletin has no description...

MINI-M4VF-67MH-RXH8

Bulletin has no description...

MINI-JMCP-MHGC-944G

Bulletin has no description...

MINI-HG23-3G85-262V

Bulletin has no description...

MINI-38MP-539P-23QJ

Bulletin has no description...

MINI-F45C-MFH5-R5W2

Bulletin has no description...

MINI-927X-FH9W-PPFM

Bulletin has no description...

Reconstruction of Personally Identifiable Information from Supervised Finetuned Models

Supervised Finetuning SFT has become one of the primary methods for adapting a large language model LLM with extensive pre-trained knowledge to domain-specific, instruction-following tasks. SFT datasets, composed of instruction-response pairs, often include user-provided information that may...

PT-2026-40007

A malicious user could craft input that is stored in conversation memory and later interpreted by the model in an unintended way. Applications using the affected advisor with user-controlled input may be susceptible to manipulation of model behavior across conversation turns...

CVE-2026-31228

The Adversarial Robustness Toolbox (ART) , versions thru 1.20.1 , contains a remote code execution vulnerability in its Kubeflow component . The root cause is the use of the unsafe eval() function to dynamically evaluate user-supplied strings for LossFn and Optimizer parameters in the robustness ...

CVE-2026-31219

The loadmodel function in the neuralmagictraining.py script of the optimate project in commit a6d302f912b481c94370811af6b11402f51d377f 2024-07-21 is vulnerable to insecure deserialization CWE-502. When a user provides a single model file path e.g., .pt or .pth via the --model command-line argumen...

CVE-2026-31232

The CosyVoice project thru commit 6e01309e01bc93bbeb83bdd996b1182a81aaf11e 2025-30-21 contains an insecure deserialization vulnerability CWE-502 in its model loading process. When loading model files .pt from a user-specified directory via the --modeldir argument, the code uses torch.load without...

CVE-2026-31217

The loadmodel function in the neuralmagictraining.py script of the optimate project in commit a6d302f912b481c94370811af6b11402f51d377f 2024-07-21 allows arbitrary code execution. When a user supplies a directory path via the --model command-line argument, the function reads a module.py file from...

VMware Spring AI Security Vulnerabilities

VMware Spring AI is a development framework created by VMware Corporation in the Spring ecosystem, which integrates artificial intelligence and large language model capabilities. VMware Spring AI has a security vulnerability. This vulnerability allows malicious users to manipulate the behavior of...

OptiMate security vulnerabilities

OptiMate is an AI model optimization tool library developed by Nebuly. There is a security vulnerability in OptiMate. This vulnerability stems from the loadmodel function in the neuralmagictraining.py script, which loads model files using torch.load, without enabling the weightsonly=True paramete...

Adversarial Robustness Toolbox Security Vulnerabilities

Adversarial Robustness Toolbox is an open-source machine learning security defense and evaluation tool developed by Trusted-AI. Versions of Adversarial Robustness Toolbox 1.20.1 and earlier contained security vulnerabilities. These vulnerabilities stemmed from the model loading function in the...

LLM security vulnerabilities

LLM is a multi-model large language model command-line interaction tool developed by Simon Willison. Versions of LLM 0.27.1 and earlier contain security vulnerabilities. These vulnerabilities stem from the use of the --functions command-line parameter to directly execute unsafe code using the exe...