{
  "sources": {
    "kevCatalogVersion": "2026.11.10",
    "nvdYears": [
      2023,
      2024,
      2025,
      2026
    ]
  },
  "scope": "Non-rejected CVEs with 2023-2026 identifiers whose affected-product or CPE data matches a product rule.",
  "allCves": 201099,
  "aiCves": 2979,
  "aiPct": 1.48,
  "byPublishedYear": {
    "2023": 50,
    "2024": 278,
    "2025": 458,
    "2026": 2193
  },
  "allByPublishedYear": {
    "2023": 23334,
    "2024": 37919,
    "2025": 45717,
    "2026": 94129
  },
  "sharePerMilleByYear": {
    "2023": 2.1,
    "2024": 7.3,
    "2025": 10,
    "2026": 23.3
  },
  "byGroup": {
    "assistant": {
      "label": "AI coding assistants and copilots",
      "n": 152,
      "byYear": {
        "2023": 0,
        "2024": 3,
        "2025": 54,
        "2026": 95
      }
    },
    "mcp": {
      "label": "MCP servers and tooling",
      "n": 501,
      "byYear": {
        "2023": 0,
        "2024": 0,
        "2025": 37,
        "2026": 464
      }
    },
    "framework": {
      "label": "Agent frameworks and SDKs",
      "n": 458,
      "byYear": {
        "2023": 3,
        "2024": 19,
        "2025": 67,
        "2026": 369
      }
    },
    "builder": {
      "label": "AI app builders and chat platforms",
      "n": 1203,
      "byYear": {
        "2023": 7,
        "2024": 151,
        "2025": 167,
        "2026": 878
      }
    },
    "serving": {
      "label": "Model serving and gateways",
      "n": 411,
      "byYear": {
        "2023": 0,
        "2024": 36,
        "2025": 76,
        "2026": 299
      }
    },
    "ml": {
      "label": "ML platforms and libraries",
      "n": 254,
      "byYear": {
        "2023": 40,
        "2024": 69,
        "2025": 57,
        "2026": 88
      }
    }
  },
  "products": [
    {
      "name": "MCP servers and tooling",
      "n": 501,
      "group": "mcp"
    },
    {
      "name": "Langflow",
      "n": 235,
      "group": "builder"
    },
    {
      "name": "n8n",
      "n": 230,
      "group": "builder"
    },
    {
      "name": "PraisonAI",
      "n": 183,
      "group": "framework"
    },
    {
      "name": "Open WebUI",
      "n": 175,
      "group": "builder"
    },
    {
      "name": "Flowise",
      "n": 146,
      "group": "builder"
    },
    {
      "name": "vLLM",
      "n": 130,
      "group": "serving"
    },
    {
      "name": "MLflow",
      "n": 94,
      "group": "ml"
    },
    {
      "name": "LoLLMs",
      "n": 84,
      "group": "builder"
    },
    {
      "name": "AnythingLLM",
      "n": 76,
      "group": "builder"
    },
    {
      "name": "LangChain and LangGraph",
      "n": 73,
      "group": "framework"
    },
    {
      "name": "Triton Inference Server",
      "n": 66,
      "group": "serving"
    },
    {
      "name": "Microsoft and GitHub Copilot",
      "n": 57,
      "group": "assistant"
    },
    {
      "name": "LibreChat",
      "n": 50,
      "group": "builder"
    },
    {
      "name": "Gradio",
      "n": 48,
      "group": "ml"
    },
    {
      "name": "LiteLLM",
      "n": 46,
      "group": "serving"
    },
    {
      "name": "llama.cpp",
      "n": 45,
      "group": "serving"
    },
    {
      "name": "Dify",
      "n": 45,
      "group": "builder"
    },
    {
      "name": "Hermes Agent",
      "n": 44,
      "group": "framework"
    },
    {
      "name": "SGLang",
      "n": 43,
      "group": "serving"
    },
    {
      "name": "AutoGPT",
      "n": 42,
      "group": "framework"
    },
    {
      "name": "H2O-3",
      "n": 41,
      "group": "ml"
    },
    {
      "name": "Hugging Face Transformers",
      "n": 33,
      "group": "ml"
    },
    {
      "name": "FastGPT",
      "n": 33,
      "group": "builder"
    },
    {
      "name": "Claude Code",
      "n": 33,
      "group": "assistant"
    },
    {
      "name": "ChuanhuChatGPT",
      "n": 31,
      "group": "builder"
    },
    {
      "name": "Cursor",
      "n": 28,
      "group": "assistant"
    },
    {
      "name": "GPT Academic",
      "n": 26,
      "group": "builder"
    },
    {
      "name": "LlamaIndex",
      "n": 26,
      "group": "framework"
    },
    {
      "name": "Roo Code",
      "n": 24,
      "group": "assistant"
    },
    {
      "name": "LobeChat",
      "n": 22,
      "group": "builder"
    },
    {
      "name": "DB-GPT",
      "n": 21,
      "group": "builder"
    },
    {
      "name": "Kubeflow",
      "n": 20,
      "group": "ml"
    },
    {
      "name": "SuperAGI",
      "n": 20,
      "group": "framework"
    },
    {
      "name": "TensorRT-LLM",
      "n": 20,
      "group": "serving"
    },
    {
      "name": "BentoML",
      "n": 18,
      "group": "serving"
    },
    {
      "name": "AgentScope",
      "n": 18,
      "group": "framework"
    },
    {
      "name": "CowAgent",
      "n": 18,
      "group": "framework"
    },
    {
      "name": "MetaGPT",
      "n": 17,
      "group": "framework"
    },
    {
      "name": "Ollama",
      "n": 16,
      "group": "serving"
    },
    {
      "name": "LocalAI",
      "n": 12,
      "group": "serving"
    },
    {
      "name": "ClearML",
      "n": 11,
      "group": "ml"
    },
    {
      "name": "PrivateGPT",
      "n": 11,
      "group": "builder"
    },
    {
      "name": "LightLLM",
      "n": 11,
      "group": "serving"
    },
    {
      "name": "NextChat",
      "n": 9,
      "group": "builder"
    },
    {
      "name": "Text Generation WebUI",
      "n": 9,
      "group": "builder"
    },
    {
      "name": "CrewAI",
      "n": 9,
      "group": "framework"
    },
    {
      "name": "OpenAI Codex CLI",
      "n": 8,
      "group": "assistant"
    },
    {
      "name": "Ray",
      "n": 7,
      "group": "ml"
    },
    {
      "name": "smolagents",
      "n": 5,
      "group": "framework"
    },
    {
      "name": "GPUStack",
      "n": 4,
      "group": "serving"
    },
    {
      "name": "Semantic Kernel",
      "n": 2,
      "group": "framework"
    },
    {
      "name": "Cline",
      "n": 2,
      "group": "assistant"
    },
    {
      "name": "AutoGen",
      "n": 1,
      "group": "framework"
    }
  ],
  "bands": {
    "critical": {
      "n": 441,
      "pct": 14.8
    },
    "high": {
      "n": 1280,
      "pct": 43
    },
    "medium": {
      "n": 1068,
      "pct": 35.9
    },
    "low": {
      "n": 87,
      "pct": 2.9
    },
    "none": {
      "n": 103,
      "pct": 3.5
    }
  },
  "families": {
    "auth": {
      "label": "Authentication and access control",
      "n": 674,
      "pct": 22.6
    },
    "injection": {
      "label": "Injection and code execution",
      "n": 546,
      "pct": 18.3
    },
    "file": {
      "label": "Path traversal and file handling",
      "n": 433,
      "pct": 14.5
    },
    "other": {
      "label": "Other specified weakness",
      "n": 410,
      "pct": 13.8
    },
    "forgery": {
      "label": "Request forgery (SSRF, CSRF)",
      "n": 319,
      "pct": 10.7
    },
    "resource": {
      "label": "Resource exhaustion",
      "n": 175,
      "pct": 5.9
    },
    "xss": {
      "label": "Cross-site scripting",
      "n": 129,
      "pct": 4.3
    },
    "deser": {
      "label": "Unsafe deserialisation",
      "n": 100,
      "pct": 3.4
    },
    "exposure": {
      "label": "Information exposure",
      "n": 97,
      "pct": 3.3
    },
    "memory": {
      "label": "Memory safety",
      "n": 92,
      "pct": 3.1
    },
    "none": {
      "label": "No weakness recorded",
      "n": 4,
      "pct": 0.1
    }
  },
  "familiesByGroup": {
    "assistant": {
      "injection": {
        "n": 70,
        "pct": 46.1
      },
      "other": {
        "n": 35,
        "pct": 23
      },
      "file": {
        "n": 19,
        "pct": 12.5
      },
      "auth": {
        "n": 19,
        "pct": 12.5
      },
      "exposure": {
        "n": 4,
        "pct": 2.6
      },
      "forgery": {
        "n": 3,
        "pct": 2
      },
      "xss": {
        "n": 1,
        "pct": 0.7
      },
      "deser": {
        "n": 1,
        "pct": 0.7
      }
    },
    "mcp": {
      "injection": {
        "n": 135,
        "pct": 26.9
      },
      "file": {
        "n": 118,
        "pct": 23.6
      },
      "auth": {
        "n": 94,
        "pct": 18.8
      },
      "forgery": {
        "n": 85,
        "pct": 17
      },
      "other": {
        "n": 34,
        "pct": 6.8
      },
      "exposure": {
        "n": 19,
        "pct": 3.8
      },
      "resource": {
        "n": 7,
        "pct": 1.4
      },
      "xss": {
        "n": 4,
        "pct": 0.8
      },
      "memory": {
        "n": 3,
        "pct": 0.6
      },
      "none": {
        "n": 1,
        "pct": 0.2
      },
      "deser": {
        "n": 1,
        "pct": 0.2
      }
    },
    "framework": {
      "auth": {
        "n": 113,
        "pct": 24.7
      },
      "injection": {
        "n": 97,
        "pct": 21.2
      },
      "other": {
        "n": 59,
        "pct": 12.9
      },
      "file": {
        "n": 59,
        "pct": 12.9
      },
      "forgery": {
        "n": 58,
        "pct": 12.7
      },
      "resource": {
        "n": 32,
        "pct": 7
      },
      "deser": {
        "n": 16,
        "pct": 3.5
      },
      "exposure": {
        "n": 16,
        "pct": 3.5
      },
      "xss": {
        "n": 5,
        "pct": 1.1
      },
      "none": {
        "n": 2,
        "pct": 0.4
      },
      "memory": {
        "n": 1,
        "pct": 0.2
      }
    },
    "builder": {
      "auth": {
        "n": 362,
        "pct": 30.1
      },
      "injection": {
        "n": 189,
        "pct": 15.7
      },
      "file": {
        "n": 160,
        "pct": 13.3
      },
      "other": {
        "n": 148,
        "pct": 12.3
      },
      "forgery": {
        "n": 129,
        "pct": 10.7
      },
      "xss": {
        "n": 106,
        "pct": 8.8
      },
      "resource": {
        "n": 56,
        "pct": 4.7
      },
      "exposure": {
        "n": 43,
        "pct": 3.6
      },
      "deser": {
        "n": 9,
        "pct": 0.7
      },
      "memory": {
        "n": 1,
        "pct": 0.1
      }
    },
    "serving": {
      "other": {
        "n": 100,
        "pct": 24.3
      },
      "memory": {
        "n": 84,
        "pct": 20.4
      },
      "resource": {
        "n": 57,
        "pct": 13.9
      },
      "auth": {
        "n": 45,
        "pct": 10.9
      },
      "deser": {
        "n": 38,
        "pct": 9.2
      },
      "injection": {
        "n": 32,
        "pct": 7.8
      },
      "forgery": {
        "n": 24,
        "pct": 5.8
      },
      "file": {
        "n": 22,
        "pct": 5.4
      },
      "exposure": {
        "n": 7,
        "pct": 1.7
      },
      "none": {
        "n": 1,
        "pct": 0.2
      },
      "xss": {
        "n": 1,
        "pct": 0.2
      }
    },
    "ml": {
      "file": {
        "n": 55,
        "pct": 21.7
      },
      "auth": {
        "n": 41,
        "pct": 16.1
      },
      "deser": {
        "n": 35,
        "pct": 13.8
      },
      "other": {
        "n": 34,
        "pct": 13.4
      },
      "injection": {
        "n": 23,
        "pct": 9.1
      },
      "resource": {
        "n": 23,
        "pct": 9.1
      },
      "forgery": {
        "n": 20,
        "pct": 7.9
      },
      "xss": {
        "n": 12,
        "pct": 4.7
      },
      "exposure": {
        "n": 8,
        "pct": 3.1
      },
      "memory": {
        "n": 3,
        "pct": 1.2
      }
    }
  },
  "topCwes": [
    [
      "CWE-22",
      328
    ],
    [
      "CWE-918",
      304
    ],
    [
      "CWE-94",
      197
    ],
    [
      "CWE-78",
      162
    ],
    [
      "CWE-862",
      151
    ],
    [
      "CWE-639",
      142
    ],
    [
      "CWE-77",
      130
    ],
    [
      "CWE-79",
      128
    ],
    [
      "CWE-863",
      115
    ],
    [
      "CWE-306",
      105
    ],
    [
      "CWE-502",
      102
    ],
    [
      "CWE-284",
      87
    ]
  ],
  "promptInjection": {
    "cwe1427All": 0,
    "descriptionMentionsAll": 168,
    "descriptionMentionsAi": 67,
    "aiMentionFamilies": {
      "injection": 28,
      "other": 11,
      "forgery": 8,
      "auth": 7,
      "file": 7,
      "xss": 3,
      "exposure": 2,
      "resource": 1
    },
    "aiMentionProducts": [
      [
        "MCP servers and tooling",
        16
      ],
      [
        "Cursor",
        15
      ],
      [
        "Roo Code",
        8
      ],
      [
        "PraisonAI",
        7
      ],
      [
        "Flowise",
        5
      ],
      [
        "LangChain and LangGraph",
        3
      ],
      [
        "LlamaIndex",
        2
      ],
      [
        "Langflow",
        2
      ],
      [
        "Claude Code",
        2
      ],
      [
        "GPT Academic",
        1
      ]
    ]
  },
  "kev": [
    {
      "id": "CVE-2025-3248",
      "product": "Langflow",
      "published": "2025-04-07",
      "kevAdded": "2025-05-05",
      "band": "critical",
      "family": "auth"
    },
    {
      "id": "CVE-2025-62593",
      "product": "Ray",
      "published": "2025-11-26",
      "kevAdded": "2026-08-17",
      "band": "high",
      "family": "injection"
    },
    {
      "id": "CVE-2025-34291",
      "product": "Langflow",
      "published": "2025-12-05",
      "kevAdded": "2026-05-21",
      "band": "high",
      "family": "auth"
    },
    {
      "id": "CVE-2025-68613",
      "product": "n8n",
      "published": "2025-12-19",
      "kevAdded": "2026-03-11",
      "band": "critical",
      "family": "other"
    },
    {
      "id": "CVE-2026-0770",
      "product": "Langflow",
      "published": "2026-01-23",
      "kevAdded": "2026-07-21",
      "band": "critical",
      "family": "other"
    },
    {
      "id": "CVE-2026-33017",
      "product": "Langflow",
      "published": "2026-03-20",
      "kevAdded": "2026-03-25",
      "band": "critical",
      "family": "injection"
    },
    {
      "id": "CVE-2026-42208",
      "product": "LiteLLM",
      "published": "2026-05-08",
      "kevAdded": "2026-05-08",
      "band": "critical",
      "family": "injection"
    },
    {
      "id": "CVE-2026-42271",
      "product": "LiteLLM",
      "published": "2026-05-08",
      "kevAdded": "2026-06-08",
      "band": "high",
      "family": "injection"
    },
    {
      "id": "CVE-2026-55255",
      "product": "Langflow",
      "published": "2026-06-23",
      "kevAdded": "2026-07-07",
      "band": "high",
      "family": "auth"
    },
    {
      "id": "CVE-2026-59822",
      "product": "LiteLLM",
      "published": "2026-07-08",
      "kevAdded": "2026-09-02",
      "band": "high",
      "family": "auth"
    },
    {
      "id": "CVE-2026-9198",
      "product": "Langflow",
      "published": "2026-07-17",
      "kevAdded": "2026-08-04",
      "band": "critical",
      "family": "injection"
    },
    {
      "id": "CVE-2026-64849",
      "product": "MLflow",
      "published": "2026-08-17",
      "kevAdded": "2026-08-19",
      "band": "critical",
      "family": "forgery"
    },
    {
      "id": "CVE-2026-102895",
      "product": "GPUStack",
      "published": "2026-11-04",
      "kevAdded": "2026-11-09",
      "band": "critical",
      "family": "auth"
    }
  ]
}