What changed in AI security, Mar 31 to Apr 6, 2025
Mar 31 to Apr 6, 2025 (ISO week 2025-W14). Weeks run Monday to Sunday in UTC.
10 records published, +2 on the previous week: 9 vulnerabilities (+6), 0 incidents (no change), 0 research items (-5), 0 news items (no change), 1 policy item (+1).
Critical and high advisories
Vulnerability records rated critical or high, newest first.Exploitation signals
Vulnerabilities published in the week that are listed in the CISA Known Exploited Vulnerabilities catalog or have an EPSS score of 10% or more.| Advisory | Exploitation | EPSS | Published |
|---|---|---|---|
| CVE-2025-27520: BentoML remote code execution through insecure deserialization CVE-2025-27520NVD/CVE Database | Not listed | 40.6% |
Packages that began delegating to a language model
Exposure Registry packages whose first release declaring an LLM SDK, agent framework or MCP dependency was published in the week.| Package | Ecosystem | LLM SDKs | Release | Released |
|---|---|---|---|---|
| langchain-perplexity | PyPI | LangChain | 0.1.0 | |
| pydantic-evals | PyPI | Pydantic AI | 0.0.52 | |
| langchain-litellm | PyPI | LangChain, LiteLLM | 0.1.0 |
Topics that moved
Largest increases over the mean of the 4 previous weeks, for topics with at least 3 records in the week.No topic had at least 3 records in this week and more than its mean over the 4 previous weeks.
Research
Peer-reviewed first, then newest.No research papers or reports were published in this week.
Policy and regulation
Newest first.Generated from the AI Sec Watch database at . Every item links to its record.