Skip to content
Advisories.

Packages

70 AI and data projects · 2,669 advisories · 43 with a critical or high one in the last 12 months

Package
TensorFlowML frameworks · PyPI tensorflow433 advisories
Open WebUIAgents and LLM apps · PyPI open-webui161 advisories · 65 critical or high this year
n8nAgents and LLM apps · npm n8n156 advisories · 79 critical or high this year
Apache AirflowData platform · PyPI apache-airflow151 advisories · 21 critical or high this year
FlowiseAgents and LLM apps · npm flowise112 advisories · 71 critical or high this year
MLflowMLOps · PyPI mlflow82 advisories · 24 critical or high this year
vLLMInference and serving · PyPI vllm71 advisories · 18 critical or high this year
Apache SupersetData platform · PyPI apache-superset66 advisories · 2 critical or high this year
JupyterNotebooks and apps · PyPI jupyter-server, PyPI notebook, PyPI jupyterlab, PyPI nbconvert, PyPI jupyterhub55 advisories · 11 critical or high this year
GradioNotebooks and apps · PyPI gradio52 advisories · 4 critical or high this year
NLTKML frameworks · PyPI nltk52 advisories · 32 critical or high this year
LangChainAgents and LLM apps · PyPI langchain, PyPI langchain-core, PyPI langchain-community, PyPI langchain-experimental, npm langchain, npm @langchain/core, npm @langchain/community45 advisories · 6 critical or high this year
ElasticsearchData platform · Maven org.elasticsearch:elasticsearch43 advisories
LiteLLMInference and serving · PyPI litellm42 advisories · 13 critical or high this year
LangflowAgents and LLM apps · PyPI langflow32 advisories · 20 critical or high this year
PaddlePaddleML frameworks · PyPI paddlepaddle32 advisories
Apache SolrData platform · Maven org.apache.solr:solr-core31 advisories · 3 critical or high this year
PyTorchML frameworks · PyPI torch31 advisories · 8 critical or high this year
TransformersML frameworks · PyPI transformers31 advisories · 11 critical or high this year
LlamaIndexAgents and LLM apps · PyPI llama-index, PyPI llama-index-core27 advisories · 4 critical or high this year
MindsDBAgents and LLM apps · PyPI mindsdb23 advisories · 2 critical or high this year
KerasML frameworks · PyPI keras20 advisories · 8 critical or high this year
BentoMLInference and serving · PyPI bentoml17 advisories · 8 critical or high this year
H2O-3MLOps · PyPI h2o17 advisories · 2 critical or high this year
OllamaInference and serving · Go github.com/ollama/ollama16 advisories · 2 critical or high this year
MinIOData platform · Go github.com/minio/minio15 advisories · 7 critical or high this year
ZenMLMLOps · PyPI zenml14 advisories
Apache SparkData platform · PyPI pyspark, Maven org.apache.spark:spark-core_2.13, Maven org.apache.spark:spark-core_2.1213 advisories · 1 critical or high this year
ONNXML frameworks · PyPI onnx13 advisories · 4 critical or high this year
Apache HadoopData platform · Maven org.apache.hadoop:hadoop-common12 advisories
Label StudioMLOps · PyPI label-studio12 advisories · 1 critical or high this year
RayMLOps · PyPI ray11 advisories · 5 critical or high this year
Apache HiveData platform · Maven org.apache.hive:hive-exec10 advisories
Apache KafkaData platform · Maven org.apache.kafka:kafka-clients, Maven org.apache.kafka:kafka_2.1310 advisories · 2 critical or high this year
LMDeployInference and serving · PyPI lmdeploy10 advisories · 8 critical or high this year
SGLangInference and serving · PyPI sglang10 advisories · 6 critical or high this year
Apache ZooKeeperData platform · Maven org.apache.zookeeper:zookeeper9 advisories · 2 critical or high this year
MCP SDKsAgents and LLM apps · PyPI mcp, npm @modelcontextprotocol/sdk9 advisories · 7 critical or high this year
IPythonNotebooks and apps · PyPI ipython8 advisories
NumPyML frameworks · PyPI numpy8 advisories
PrefectData platform · PyPI prefect8 advisories · 2 critical or high this year
StreamlitNotebooks and apps · PyPI streamlit6 advisories
TorchServeInference and serving · PyPI torchserve6 advisories
Apache ArrowML frameworks · PyPI pyarrow5 advisories · 1 critical or high this year
ChromaVector databases · PyPI chromadb4 advisories · 4 critical or high this year
ClearMLMLOps · PyPI clearml4 advisories
dbt CoreData platform · PyPI dbt-core4 advisories
KedroMLOps · PyPI kedro4 advisories · 2 critical or high this year
PandasAIAgents and LLM apps · PyPI pandasai4 advisories
VannaAgents and LLM apps · PyPI vanna4 advisories
WeaviateVector databases · Go github.com/weaviate/weaviate4 advisories · 2 critical or high this year
DagsterData platform · PyPI dagster3 advisories · 1 critical or high this year
DuckDBData platform · PyPI duckdb3 advisories
MilvusVector databases · Go github.com/milvus-io/milvus3 advisories · 2 critical or high this year
scikit-learnML frameworks · PyPI scikit-learn3 advisories
Apache AvroData platform · Maven org.apache.avro:avro2 advisories
Apache ParquetData platform · Maven org.apache.parquet:parquet-avro2 advisories
FeastMLOps · PyPI feast2 advisories · 1 critical or high this year
HaystackAgents and LLM apps · PyPI haystack-ai, PyPI farm-haystack2 advisories
LangGraphAgents and LLM apps · PyPI langgraph2 advisories · 1 critical or high this year
Llama StackAgents and LLM apps · PyPI llama-stack2 advisories
Semantic KernelAgents and LLM apps · PyPI semantic-kernel2 advisories · 2 critical or high this year
XinferenceInference and serving · PyPI xinference2 advisories · 1 critical or high this year
Apache FlinkData platform · Maven org.apache.flink:flink-runtime1 advisories
DeepSpeedML frameworks · PyPI deepspeed1 advisories
joblibML frameworks · PyPI joblib1 advisories
llama-cpp-pythonInference and serving · PyPI llama-cpp-python1 advisories
MLRunMLOps · PyPI mlrun1 advisories
OpenSearchData platform · Maven org.opensearch:opensearch1 advisories
pandasML frameworks · PyPI pandas1 advisories

Critical advisories by email

Wednesdays: the week’s critical and high advisories in the AI and data stack, with the fixed versions. Only in weeks that have some.

Double opt-in. Unsubscribe any time.