AdvisoriesToolsStatsChecklistSubmitGet the email
← All tools
Models & APIs · Meta

Meta Llama

Open-weight Llama models and the llama-stack / llama-models tooling.

3Advisories
0critical
1high
2medium
2024-11-18Latest
Timeline · advisories per quarter
12024 Q2
22024 Q4
Named in sources

Reported for Meta Llama

01. highPrompt injectionOWASP LLM01:2025: prompt injection is the top LLM app riskOWASP ranks prompt injection first in its Top 10 for LLM Applications 2025. Any app that feeds untrusted text to a model with tools or data access is exposed. OpenAI Anthropic Claude Google Gemini +4 more 2024-11-18 02. mediumCode executionCVE-2024-50050: Llama Stack used pickle over socketsMeta’s Llama Stack used Python pickle to deserialise socket messages, which could allow remote code execution. It switched to JSON. Meta Llama 2024-10-23
Same pattern

Also worth checking

01. mediumJailbreakMany-shot jailbreaking: long context windows weaken refusalsAnthropic published research showing that filling a long prompt with many fake dialogue examples can push models into answering requests they would normally refuse. Anthropic Claude OpenAI Google Gemini +2 more 2024-04-02
The weekly email

One email a week. Only what changed.

New advisories, CVEs and fixes for Lovable, Bolt, v0, Replit, Base44 and Cursor apps. No roundups of things you already read.