AdvisoriesToolsStatsChecklistSubmitGet the email
← All tools
Models & APIs · Meta

Meta Llama

Open-weight Llama models and the llama-stack / llama-models tooling.

3Advisories
0critical
1high
2medium
2024-11-18Latest
Timeline · advisories per quarter
12024 Q2
22024 Q4
Named in sources

Reported for Meta Llama

01. highPrompt injectionOWASP LLM01:2025: prompt injection is the top LLM app riskOWASP ranks prompt injection first in its Top 10 for LLM Applications 2025. Any app that feeds untrusted text to a model with tools or data access is exposed. OpenAI Anthropic Claude Google Gemini +4 more 2024-11-18 02. mediumCode executionCVE-2024-50050: Llama Stack used pickle over socketsMeta’s Llama Stack used Python pickle to deserialise socket messages, which could allow remote code execution. It switched to JSON. Meta Llama 2024-10-23
Same pattern

Also worth checking

01. mediumJailbreakMany-shot jailbreaking: long context windows weaken refusalsAnthropic published research showing that filling a long prompt with many fake dialogue examples can push models into answering requests they would normally refuse. Anthropic Claude OpenAI Google Gemini +2 more 2024-04-02
The weekly email

One email a week. Only what changed.

New advisories, CVEs and fixes for Lovable, Bolt, v0, Replit, Base44 and Cursor apps. No roundups of things you already read.

Free. The list is new, so the first issues go out once there are readers. Unsubscribe from any email in one click. We never sell or share addresses.