AI Infrastructure
-
AI CVEs in CISA KEV: Langflow, LiteLLM, Ray, and the Gaps
Six AI-stack CVEs sit in CISA KEV: three Langflow, two LiteLLM, one Ray. What confirmed exploitation looks like, and why ShadowRay is not listed.
-
Inference Server CVEs: vLLM, Ollama, llama.cpp, Triton
The serving layer now outproduces model files for critical CVEs. Verified entries in vLLM, Ollama, llama.cpp and Triton, and the three defects behind them.
-
ML Model CVE Tracking: How to Monitor Your AI Stack
How to track CVEs across ML frameworks, inference servers, and model artifacts, and what to do when a vendor disputes the advisory anyway.