ML Security
-
CVE Tracking Tool for ML Stacks: What to Run in 2026
Which CVE tracking tool to run on an ML stack: OSV-Scanner or pip-audit in CI, Dependency-Track for SBOMs, KEV and EPSS to rank fixes.
-
ML Model CVE Tracking: How to Monitor Your AI Stack
How to track CVEs across ML frameworks, inference servers, and model artifacts, and what to do when a vendor disputes the advisory anyway.
-
Malicious Model File Detection: Auditing ML Models
Pickle serialization flaws, PickleScan bypass CVEs, and a practical detection stack for teams pulling models from public repositories like Hugging Face.
-
How to Triage an ML-Stack CVE: A Practical Workflow
A repeatable workflow for taking an ML-library CVE from 'a scanner flagged it' to a defensible decision, without panic-patching or trusting the score.
-
ML Library CVE Analysis Beyond the CVSS Score
ML library CVEs are usually scored against a generic threat model that doesn't match how the library is used in production AI systems.