CVE Program partner

@huntr_ai

Protect AI (formerly huntr.dev)

API
CVEs, 365 days82886 all time, 83 rejected
Quality66%median 99%
CVSS by the CNA100%share of records
CWE100%share of records
Affected versions0%not n/a or unspecified
CVSS added by CISA0%lower is better
OrganisationProtect AI (formerly huntr.dev)
RoleCNA
TypeBug Bounty Provider, Open Source, Researcher
Reports tomitre
ScopeVulnerabilities in Protect AI products, third-party code vulnerabilities reported by researchers collaborating with huntr and vulnerabilities discovered by, or reported to, Protect AI that are not in another CNA’s scope.
Advisorieshttps://huntr.com/bounties/hacktivity

Latest CVEs · RSS

  • CVE-2026-12570 2026-08-10 · CVSS 5.5
    A vulnerability in keras-team/keras versions <= 3.15.0 allows for a denial of service (DoS) attack when loading malicious .keras model files via the keras.model
  • CVE-2026-12372 2026-08-09 · CVSS 3.7
    A Server-Side Request Forgery (SSRF) vulnerability exists in nltk/nltk versions 3.9.4 and the current develop branch. The `nltk.pathsec.validate_network_url()`
  • CVE-2026-10595 2026-08-09 · CVSS 7.5
    A path traversal vulnerability exists in parisneo/lollms version 2.1.0, specifically in the SPA catch-all route implemented in `backend/routers/ui.py`. The vuln
  • CVE-2026-12261 2026-08-07 · CVSS 5.3
    A vulnerability in `nltk.downloader` in nltk/nltk versions <= 3.9.4 allows for cross-package resource and model poisoning. The downloader extracts package archi
  • CVE-2026-12259 2026-08-03 · CVSS 5.3
    In nltk version 3.9.4, the `nltk.downloader.Downloader._download_package()` function writes downloaded package bytes to disk and may extract them before enforci
  • CVE-2026-9856 2026-08-02 · CVSS 7.1
    A vulnerability in huggingface/transformers versions <=5.8.0.dev0 allows an attacker to perform arbitrary file writes via path traversal. The issue resides in t
  • CVE-2026-9335 2026-08-02 · CVSS 6.5
    A vulnerability in keras-team/keras versions <= 3.14.0 allows arbitrary local HDF5 file content disclosure due to improper handling of HDF5 ExternalLinks. The `
  • CVE-2026-11922 2026-07-24 · CVSS 6.5
    A vulnerability in zenml-io/zenml versions 0.57.0 through 0.94.2 allows an attacker to bypass rate-limiting on the `POST /api/v1/login` and self password-change
  • CVE-2026-11876 2026-07-21 · CVSS 5.0
    In zenml-io/zenml version 0.94.2, the `GET /api/v1/stack-deployment/stack` endpoint (`get_deployed_stack`) lacks proper RBAC authorization checks, allowing any
  • CVE-2026-12484 2026-07-19 · CVSS 7.8
    A vulnerability in keras-team/keras version 3.15.0 allows unsafe deserialization of attacker-controlled PyTorch pickle data through the public `keras.layers.Tor
  • CVE-2026-12228 2026-07-18 · CVSS 8.7
    A stored cross-site scripting (XSS) vulnerability exists in the `POST /api/prompts/share` endpoint of parisneo/lollms (latest version). The endpoint stores atta
  • CVE-2026-12482 2026-07-14 · CVSS 3.1
    A vulnerability in keras-team/keras version 3.12.0 allows an attacker to craft a malicious tar archive that bypasses the `filter_safe_tarinfos` validation in `k
  • CVE-2026-12252 2026-07-04 · CVSS 7.8
    In nltk/nltk versions 3.9.3 and earlier, five Stanford interface classes (StanfordPOSTagger, StanfordNERTagger, StanfordParser, StanfordDependencyParser, and St
  • CVE-2026-12481 2026-07-03 · CVSS 8.8
    A vulnerability in keras-team/keras version 3.14.0 allows for arbitrary code execution due to improper handling of deserialization in the `Lambda` layer. Specif
  • CVE-2026-8147 2026-07-02 · CVSS 8.1
    In MLflow versions prior to 3.14.0, when running with authentication enabled, the trace API endpoints lack proper authorization validators. This allows any auth
  • CVE-2026-12480 2026-07-01 · CVSS 5.5
    Keras versions up to and including 3.13.2 are vulnerable to an arbitrary HDF5 file read due to an incomplete fix for CVE-2026-1669. The vulnerability resides in
  • CVE-2026-8387 2026-07-01 · CVSS 2.4
    A vulnerability in allegroai/clearml versions up to and including 1.16.5 allows for relative path traversal when extracting `.zip` archives using the `ZipFile.e
  • CVE-2026-6658 2026-06-26 · CVSS 5.4
    A vulnerability in jupyter/nbconvert versions <= 7.17.0 allows for Cross-site Scripting (XSS) via unsanitized `text/vnd.mermaid` output in HTML exports. The `da
  • CVE-2026-12479 2026-06-22 · CVSS 6.1
    A path traversal vulnerability exists in keras-team/keras version 3.14.0, specifically in the `DiskIOStore.make` method within the Keras 3 model saving and load
  • CVE-2026-5366 2026-06-20 · CVSS 9.9
    Prefect version 3.6.23 is vulnerable to remote code execution due to improper handling of user-controlled input in the `GitRepository` storage class. The `commi
  • CVE-2026-12199 2026-06-17 · CVSS 7.5
    A vulnerability in `nltk.app.wordnet_app` up to version 3.9.3 allows unauthenticated remote shutdown of the local WordNet Browser HTTP server when started in it
  • CVE-2026-3840 2026-06-12 · CVSS 7.1
    A vulnerability in Kedro version 1.2.0 allows an attacker to exploit path traversal by providing a crafted version string. The `_get_versioned_path()` method in
  • CVE-2026-11816 2026-06-11 · CVSS 8.1
    Keras versions prior to 3.14.0 are vulnerable to a path traversal issue in the archive extraction utilities located in `keras/src/utils/file_utils.py`. The func
  • CVE-2026-5497 2026-06-11 · CVSS 7.5
    vLLM versions 0.8.0 and later are vulnerable to an Out-of-Memory (OOM) Denial of Service (DoS) attack due to unbounded frame count processing in the `VideoMedia
  • CVE-2026-6657 2026-06-03 · CVSS 6.1
    A vulnerability in jupyter-server versions 1.12.0 through 2.17.0 allows an attacker to bypass CORS origin validation when the `allow_origin_pat` configuration i

All CVE Program partners