Question 1

What is fru.dev Advisories?

Accepted Answer

A daily list of security advisories and CVEs for the AI and data stack: inference servers (vLLM, Ollama, SGLang, LiteLLM), agent frameworks (LangChain, LlamaIndex, Langflow, n8n), ML frameworks (PyTorch, TensorFlow, Transformers), MLOps (MLflow, Ray) and the data platform (Airflow, Spark, Kafka, dbt, DuckDB). Each advisory shows its severity, CVSS score, the affected versions and the version that fixes it.

Question 2

Which projects does it cover, and how does the list grow?

Accepted Answer

It started with about 70 hand-picked projects. Every day the run also reads the projects repos.fru.dev tracks (every notable open-source data and AI project), asks deps.dev which packages each one publishes (PyPI, npm, Maven, Go, crates.io, NuGet, RubyGems) and adds a project as soon as OSV holds an advisory for one of them. Projects added this way are marked Unverified until checked by hand. Every company in the companies.fru.dev registry is also checked for official advisory sources (security.txt, CSAF provider metadata, a security advisories page and its feed, CNA status), a slice each day, and the result is shown on the method page.

Question 3

Where does the data come from?

Accepted Answer

Two kinds of source, read every day. Package advisories come from the OSV database (osv.dev), which carries the GitHub Advisory Database and the PyPA, Go and other ecosystem databases; duplicate records of the same issue (GHSA, PYSEC, GO ids) are folded into one, under the GitHub id. Vendor advisories come from what companies publish themselves: the CVE records a company issues as a CVE Numbering Authority (read from NVD), its own advisory feed (AWS security bulletins), its CSAF provider files and the security advisories in its public GitHub organization. A CVE listed from one source is not listed again from another. NVD fills in a score for records that have none.

Question 4

How is severity decided?

Accepted Answer

Where GitHub reviewed an advisory, its severity label (critical, high, moderate, low) is used. The CVSS 3.x base score is computed from the advisory's vector with the FIRST formula. An advisory with only a CVSS 4.0 vector keeps GitHub's label. "Unrated" means no source has scored it yet.

Question 5

What should I patch first?

Accepted Answer

The Patch now table on the home page lists critical and high advisories published in the last six weeks, worst first, with the fixed version. Upgrade the package to at least that version. An advisory with no fixed version has no patch yet: check the source advisory for a workaround.

Question 6

Does an advisory mean my deployment is vulnerable?

Accepted Answer

Not necessarily. It means the listed versions of the package contain the issue. Whether you are exposed depends on the version you run and whether you use the affected feature. Check your installed version against the affected ranges on the advisory page.

Question 7

Is there an RSS feed?

Accepted Answer

Yes. /rss.xml carries every new advisory, /severe.xml only critical and high ones, and each package has its own feed, for example /packages/vllm/rss.xml. A weekly email on Wednesdays lists the critical and high advisories, only in weeks that have some.

AI and data stack advisories

Patch now

Latest advisories