Millions of AI agents imperiled by critical vulnerability in open source package★ 78
Ars Technica AI18 days agoIncidentArs Technica reports that Starlette, a Python package with about 325 million weekly downloads, has a critical vulnerability called BadHost. The flaw can let crafted Host headers confuse request.url.path, potentially bypassing middleware-based path authorization. AI infrastructure using FastAPI or Starlette, including vLLM, LiteLLM, MCP servers, LLM proxies, and agent frameworks, should upgrade Starlette and audit custom middleware.
Everyone is navigating AI security in real time — even Google★ 70
TechCrunch AI20 days agoCommentaryAs AI adoption accelerates, organizations worldwide—including Google—are finding themselves in a transitional phase, forced to address AI security vulnerabilities in real time. Traditional cybersecurity frameworks are proving insufficient against novel threats like prompt injection and model poisoning. This shifting landscape requires continuous adaptation and a fundamental rethink of how AI systems are secured.
Next.js 發布 2026 年 5 月安全更新★ 70
Vercel Changelog38 days agoReleaseVercel officially published a security update notice for the Next.js framework on May 7, 2026 (the "Next.js May 2026 security release"). As one of the most…
Vercel 發布 CVE-2026-23869 安全漏洞摘要公告★ 75
Vercel Changelog67 days agoIncidentVercel officially published a brief advisory on April 8, 2026 regarding security vulnerability CVE-2026-23869. While the Changelog entry released so far is…
Axios 套件安全入侵事件：Vercel 發布緊急修復與防範指引★ 85
Vercel Changelog75 days agoIncident### Incident Overview On March 31, 2026, Vercel issued an emergency security advisory warning that **Axios**, a widely-used JavaScript HTTP client library, had…
Vercel 發布 CVE-2025-59471 與 CVE-2025-59472 安全漏洞摘要公告★ 75
Vercel Changelog139 days agoIncidentVercel officially published a summary advisory on January 26, 2026 covering two security vulnerabilities: CVE-2025-59471 and CVE-2025-59472. While the detailed…
Vercel 發布 CVE-2026-23864 安全漏洞說明公告★ 75
Vercel Changelog139 days agoIncidentVercel officially published a summary report for security vulnerability **CVE-2026-23864** on January 26, 2026. This is an important security advisory…
React Server Components 安全更新：修復 DoS 阻斷服務與原始碼洩露漏洞★ 85
Vercel Changelog185 days agoReleaseVercel has officially published an important security update announcement for React Server Components (RSC), aimed at addressing security vulnerabilities that…
Vercel 發布 CVE-2025-55182 安全漏洞公告
Vercel Changelog193 days agoIncidentVercel has recently published a security vulnerability advisory regarding **CVE-2025-55182**. While the Changelog page has not yet provided detailed…
CVE-2025-48985：Vercel AI SDK 輸入驗證繞過漏洞安全公告★ 75
Vercel Changelog220 days agoIncidentVercel has officially published a security advisory in its Changelog disclosing a security vulnerability identified as **CVE-2025-48985**, which indicates that…
CVE-2025-52662：Nuxt DevTools 存在 XSS 跨網站指令碼漏洞
Vercel Changelog220 days agoIncident### Vulnerability Overview Vercel recently published a security advisory disclosing a vulnerability identified as **CVE-2025-52662** in Nuxt DevTools, a…
Vercel 發布安全更新：修復 CVE-2025-57752 安全漏洞★ 70
Vercel Changelog289 days agoIncidentVercel officially published a security vulnerability notice for **CVE-2025-57752** on their Changelog. ### Vulnerability Background and Current Status At this…
Vercel 發布安全通報 CVE-2025-55173，建議 Next.js 與全端開發者關注並更新專案依賴★ 70
Vercel Changelog289 days agoIncidentVercel officially published a security vulnerability notice for **CVE-2025-55173** on August 29, 2025 in its official Changelog. Since the Changelog currently…
Vercel 發布安全漏洞公告 CVE-2025-57822
Vercel Changelog289 days agoIncidentVercel officially published a notice regarding security vulnerability **CVE-2025-57822** on its Changelog page. Since the notice currently only discloses the…
Vercel 發布安全漏洞公告 CVE-2025-49005
Vercel Changelog346 days agoIncidentVercel officially published a security vulnerability advisory designated CVE-2025-49005 on July 3, 2025. At present, this advisory on the Vercel Changelog only…
Vercel 發布安全通報 CVE-2025-49826
Vercel Changelog346 days agoIncidentOn July 3, 2025, Vercel officially published a security vulnerability advisory designated CVE-2025-49826 in its official Changelog. Since the Changelog page…
Vercel 發布安全漏洞公告 CVE-2025-48068★ 70
Vercel Changelog382 days agoIncidentVercel officially published a Changelog announcement on May 28, 2025, regarding security vulnerability CVE-2025-48068. At this time, the announcement has only…
Vercel 針對 React Router 與 Remix 安全漏洞 (CVE-2025-43864) 提供自動防護★ 72
Vercel Changelog414 days agoIncidentVercel has published an update announcing the deployment of platform-level automatic protection against the recently discovered security vulnerability…
Vercel 發布 CVE-2025-32421 安全漏洞公告★ 75
Vercel Changelog418 days agoIncidentVercel officially published a security vulnerability advisory on April 22, 2025 regarding CVE-2025-32421. While the Changelog page has not yet disclosed the…
Vercel 提供針對 React Router 安全漏洞 CVE-2025-31137 的自動防護★ 72
Vercel Changelog423 days agoReleaseVercel published a security update on April 17, 2025, announcing that it has deployed proactive protection against React Router security vulnerability…
Vercel 發布 CVE-2025-30218 安全漏洞公告★ 75
Vercel Changelog438 days agoIncidentVercel has officially published a security vulnerability notice regarding CVE-2025-30218 in its Changelog. CVE (Common Vulnerabilities and Exposures) is the…
Gradio 5 安全性審查：打造更安全的 AI 應用部署環境★ 80
Hugging Face Blog612 days agoReleaseAs AI applications become increasingly widespread, Gradio has become one of the most popular tools for developers to showcase and deploy machine learning…
Replicate 揭露共享網路安全漏洞：已修復多租戶隔離缺陷，未發現用戶數據洩漏★ 75
Replicate Blog752 days agoIncidentAI model hosting platform Replicate published a security advisory on May 23, 2024, disclosing a "Shared Network Vulnerability" affecting its multi-tenant…
Hugging Face 與 Wiz Research 攜手合作，共同提升開源 AI 生態系安全★ 75
Hugging Face Blog801 days agoBusinessHugging Face, as the world's largest hosting platform for open-source AI models, datasets, and applications (Spaces), has become indispensable infrastructure…