AI & Machine Learning

LLMs, vector databases, ML frameworks, and AI infrastructure tooling.

All Breaking Security Features

Important Recent

Upgrade now

ludwig v0.17.8 Security relevant 7h

RCE / SSRF

Path traversal fix

Open

Upgrade now

langroid 0.65.14 Security relevant 12h

Auth Breaking upgrade

Blocks write SELECT statements

Open

Upgrade now

Algernon v1.17.11 Security relevant 18h

RCE / SSRF

Path injection fix

Open

Upgrade now

LIA v1.25.20 Security relevant 2d

Dependencies

Advisories closed + security controls

Open

Upgrade now

melandlabs/openloomi](https: v0.8.8 Security relevant 2d

Auth

Missing authorization IDOR

Open

Upgrade now

redis 8.8.1 Security relevant 3d

RCE / SSRF

RedisBloom/tdigest RCE vulnerability

Open

v8.6.5 (3d) Remote code execution via crafted payload

v8.4.5 (3d) Remote code execution security fixes

v8.2.8 (3d) RCE security fixes

v7.4.10 (3d) Stream RESTORE RCE vulnerability

v7.2.15 (3d) Stream RESTORE RCE vulnerability

v6.2.23 (3d) Stream RESTORE RCE vulnerability

Upgrade now

LIA v1.25.16 Security relevant 3d

Auth RCE / SSRF

Next.js bump + chat fixes

Open

v1.25.11 (5d) Security fixes + dep updates

Upgrade now

Onyx Community Edition v3.2.16 Security relevant 5d

RCE / SSRF

ReDoS fix

Open

Config change

Talon v3.1.1 Security relevant 5d

Auth RBAC

Closed‑by‑default bridge auth

Open

Upgrade now

OpenHands cloud-1.47.0 Security relevant 6d

Dependencies

CVE fix + login redirect

Open

Review required

chernistry/bernstein v3.8.0 Security relevant 7d

Auth RBAC RCE / SSRF

Resume authentication fix

Open

Upgrade now

LIA v1.25.5 Security relevant 9d

Dependencies

CVE fixes

Open

Review required

chernistry/bernstein v3.6.0 Security relevant 10d

Auth RBAC RCE / SSRF +2 more

Provenance trust classes

Open

Review required

Skillscript v0.34.0 Security relevant 10d

Auth

Shell secret scrubbing

Open

Config change

Nenya v0.8.5 Security relevant 10d

Auth

Redacted credentials + headers

Open

Upgrade now

MaxKB v2.10.4-lts Security relevant 11d

Auth RBAC RCE / SSRF

Security fixes

Open

Review required

graphify v0.9.15 Security relevant 13d

Auth

XSS fix + ignore detection

Open

Review required

Agent AFK v5.37.3 Security relevant 13d

Auth RBAC

bash path scan & denylist

Open

Review required

isitsecure v0.1.1 Security relevant 15d

Dependencies

CodeQL fix + Slack YAML repair

Open

Upgrade now

flytohub/flyto-core v2.26.8 Security relevant 16d

RCE / SSRF Breaking upgrade

Five security fixes

Open

Upgrade now

pydantic-ai v1.107.1 Security relevant 16d

Auth RCE / SSRF

GHSA-jpr8-2v3g-wgf9 patch + sanitize fix

Open

Upgrade now

flytohub/flyto-core v2.26.7 Security relevant 19d

RCE / SSRF Breaking upgrade

SSRF security fixes

Open

v2.26.6 (19d) Security fixes

Beta — feedback welcome: [email protected]