1013 matches found
PRISM: Generation-Time Detection and Mitigation of Secret Leakage in Multi-Agent LLM Pipelines
Multi-agent LLM systems introduce a security risk in which sensitive information accessed by one agent can propagate through shared context and reappear in downstream outputs, even without explicit adversarial intent. We formalise this phenomenon as propagation amplification, where leakage risk...
Directory Traversal
Overview Affected versions of this package are vulnerable to Directory Traversal in the execution of Node-based asset pipelines such as PostCSS, Babel, or TailwindCSS. An attacker can gain unauthorized access to files outside the intended project directory by executing code through these tools wh...
Directory Traversal
Overview Affected versions of this package are vulnerable to Directory Traversal in the execution of Node-based asset pipelines such as PostCSS, Babel, or TailwindCSS. An attacker can gain unauthorized access to files outside the intended project directory by executing code through these tools wh...
CVE-2026-41907 vulnerabilities
Vulnerabilities for packages: librechat, argo-workflows, wazuh-dashboard-fips, dbgate, dbgate-fips, opensearch-dashboards-fips, renovate, wazuh-dashboard, jitsucom-jitsu, langfuse-fips, drupal, gemini-cli, saf, sqlpad, code-server, kubeflow-pipelines, opensearch-dashboards,...
CVE-2026-41907 vulnerabilities
Vulnerabilities for packages: renovate, kubeflow-katib, saf, opensearch-dashboards, prism, argo-workflows, langfuse, kubeflow-centraldashboard, nextcloud-server, jitsucom-jitsu, sqlpad, npm, code-server, py3-jupyterlab, kubeflow-pipelines...
GHSA-WHJ4-6X5X-4V2J vulnerabilities
Vulnerabilities for packages: kubeflow-pipelines-visualization-server, open-webui, superset...
CVE-2026-40192 vulnerabilities
Vulnerabilities for packages: kubeflow-pipelines-visualization-server, open-webui, superset...
Gray-Box Poisoning of Continuous Malware Ingestion Pipelines
Modern malware detection pipelines rely on continuous data ingestion and machine learning to counter the high volume of novel threats. This work investigates a realistic gray-box poisoning threat model targeting these pipelines. Using the secmlmalware framework, we generate problem-space...
GHSA-5XMW-VC9V-4WF2 vulnerabilities
Vulnerabilities for packages: kubeflow-pipelines-visualization-server, open-webui, superset...
CVE-2026-42308 vulnerabilities
Vulnerabilities for packages: kubeflow-pipelines-visualization-server, open-webui, superset...
CVE-2026-42310 vulnerabilities
Vulnerabilities for packages: kubeflow-pipelines-visualization-server, open-webui, superset...
CVE-2026-42309 vulnerabilities
Vulnerabilities for packages: kubeflow-pipelines-visualization-server, open-webui, superset...
GHSA-WJX4-4JCJ-G98J vulnerabilities
Vulnerabilities for packages: kubeflow-pipelines-visualization-server, open-webui, superset...
GHSA-R73J-PQJ5-W3X7 vulnerabilities
Vulnerabilities for packages: kubeflow-pipelines-visualization-server, open-webui, superset...
GHSA-PWV6-VV43-88GR vulnerabilities
Vulnerabilities for packages: kubeflow-pipelines-visualization-server, open-webui, superset...
CVE-2026-42311 vulnerabilities
Vulnerabilities for packages: kubeflow-pipelines-visualization-server, open-webui, superset...
GHSA-WJX4-4JCJ-G98J vulnerabilities
Vulnerabilities for packages: open-webui, kubeflow-pipelines-visualization-server, superset...
GHSA-R73J-PQJ5-W3X7 vulnerabilities
Vulnerabilities for packages: open-webui, kubeflow-pipelines-visualization-server, superset...