What changed in AI security, Oct 7 to Oct 13, 2024
Oct 7 to Oct 13, 2024 (ISO week 2024-W41). Weeks run Monday to Sunday in UTC.
14 records published, +12 on the previous week: 14 vulnerabilities (+12), 0 incidents (no change), 0 research items (no change), 0 news items (no change), 0 policy items (no change).
Critical and high advisories
Vulnerability records rated critical or high, newest first.- Critical
CVE-2024-47871: Gradio insecure communication between FRP client and server when share=True
CVE-2024-47871NVD/CVE Database - High
CVE-2024-47870: Gradio race condition in update_root_in_config allows backend URL redirection
CVE-2024-47870NVD/CVE Database - High
CVE-2024-47868: Gradio arbitrary file leak through post-processing of file data components
CVE-2024-47868NVD/CVE Database - High
CVE-2024-47867: Gradio lack of integrity check on downloaded FRP client
CVE-2024-47867NVD/CVE Database - Critical
CVE-2024-47167: Gradio server-side request forgery through the /queue/join endpoint
CVE-2024-47167NVD/CVE Database - High
CVE-2024-47084: Gradio CORS origin validation flaw allows cross-site requests
CVE-2024-47084NVD/CVE Database - High
CVE-2024-43610: Copilot Studio exposure of sensitive information to unauthorized actor
CVE-2024-43610NVD/CVE Database
Exploitation signals
Vulnerabilities published in the week that are listed in the CISA Known Exploited Vulnerabilities catalog or have an EPSS score of 10% or more.No vulnerability published in this week is listed as exploited or has an EPSS score of 10% or more.
Packages that began delegating to a language model
Exposure Registry packages whose first release declaring an LLM SDK, agent framework or MCP dependency was published in the week.| Package | Ecosystem | LLM SDKs | Release | Released |
|---|---|---|---|---|
| lancedb | PyPI | LanceDB | 0.14.0 |
Topics that moved
Largest increases over the mean of the 4 previous weeks, for topics with at least 3 records in the week.No topic had at least 3 records in this week and more than its mean over the 4 previous weeks.
Research
Peer-reviewed first, then newest.No research papers or reports were published in this week.
Policy and regulation
Newest first.No regulatory or policy records were published in this week.
Generated from the AI Sec Watch database at . Every item links to its record.