Malicious Lightning 2.6.2/2.6.3 released April 30 enable credential theft via hidden payload, leading to PyPI quarantine and ...
As unloved as IBM’s PCjr was, with only a one-year production run, it’s hard to complain about the documentation available ...
CVE-2026-5760 (CVSS 9.8) exposes SGLang via /v1/rerank endpoint, enabling RCE through malicious GGUF models, risking server ...
Now a tiny script turns them into clean, shareable error reports in seconds.
Gemma 4 made local LLMs feel practical, private, and finally useful on everyday hardware.
TL;DR Two malicious versions of the popular PyTorch Lightning package have been uploaded to PyPI following the publisher ...
The post How Escape AI Pentesting Exploited SSRF in LiteLLM appeared first on Escape – Application Security & Offensive ...