#ai-infrastructure
-
AI CVEs in CISA KEV: Ray, LiteLLM, and What's Missing
Three AI-stack CVEs sit in the CISA KEV catalog: one Ray, two LiteLLM. What confirmed exploitation looks like, and why ShadowRay still is not listed.
-
Inference Server CVEs: vLLM, Ollama, llama.cpp, Triton
The serving layer now outproduces model files for critical CVEs. Verified entries in vLLM, Ollama, llama.cpp and Triton, and the three defects behind them.
-
ML Model CVE Tracking: How to Monitor Your AI Stack
How to track CVEs across ML frameworks, inference servers, and model artifacts, and what to do when a vendor disputes the advisory anyway.