2 spills in 12 months for ML infra
Each square is a day. Tap one to see what spilled. Heat = critical 4, high 3, medium 2, low 1, update half.
Past orders
- highpatchedexploited MLflow Server-Side Request Forgery Vulnerability MLflow MLflow MLflow contains a server-side request forgery vulnerability that can allow attackers to reach internal or cloud metadata services and receive response_status and response_body. Added to CISA KEV on 2026-08-19 (federal deadline 2026-09-02).
- highpatchedexploited Ray-Project Ray Code Injection Vulnerability Ray-Project Ray contains a code injection vulnerability that could allow remote code execution. Developers using Ray as a development tool may be exposed to this vulnerability exploitable through Firefox and Safari. Added to CISA KEV on 2026-08-17 (federal deadline 2026-08-20).
Follow ML infra
RSS: /feed.xml?stack=ml-infra. JSON: /incidents.json?stack=ml-infra. Or add it to your usual for delivery.