What changed in AI security, Nov 11 to Nov 17, 2024
Nov 11 to Nov 17, 2024 (ISO week 2024-W46). Weeks run Monday to Sunday in UTC.
5 records published, no change on the previous week: 3 vulnerabilities (no change), 0 incidents (no change), 2 research items (+1), 0 news items (no change), 0 policy items (-1).
Critical and high advisories
Vulnerability records rated critical or high, newest first.- Critical
CVE-2024-52384: Sage AI WordPress plugin unrestricted file upload allowing web shell upload
CVE-2024-52384NVD/CVE Database - High
CVE-2024-52383: KCT Ai Auto Tool Content Writing Assistant missing authorization flaw
CVE-2024-52383NVD/CVE Database - High
CVE-2024-21799: Intel Extension for Transformers path traversal enabling privilege escalation
CVE-2024-21799NVD/CVE Database
Exploitation signals
Vulnerabilities published in the week that are listed in the CISA Known Exploited Vulnerabilities catalog or have an EPSS score of 10% or more.No vulnerability published in this week is listed as exploited or has an EPSS score of 10% or more.
Packages that began delegating to a language model
Exposure Registry packages whose first release declaring an LLM SDK, agent framework or MCP dependency was published in the week.| Package | Ecosystem | LLM SDKs | Release | Released |
|---|---|---|---|---|
| browser-use | PyPI | Anthropic SDK, Google Gemini SDK, Groq SDK, LangChain, Model Context Protocol SDK, Ollama client, OpenAI SDK | 0.1.3 | |
| ag2 | PyPI | AutoGen / AG2 | 0.3.2b2 | |
| langchain-xai | PyPI | LangChain | 0.1.0 | |
| @modelcontextprotocol/sdk | npm | Model Context Protocol SDK | 0.4.0 |
Topics that moved
Largest increases over the mean of the 4 previous weeks, for topics with at least 3 records in the week.No topic had at least 3 records in this week and more than its mean over the 4 previous weeks.
Research
Peer-reviewed first, then newest.Policy and regulation
Newest first.No regulatory or policy records were published in this week.
Generated from the AI Sec Watch database at . Every item links to its record.