
Recent discoveries have shone a light on alarming security vulnerabilities within several widely-used open-source machine learning (ML) toolkits, exposing both server and client sides to substantial risks. Security researchers at JFrog, a software supply chain security firm, have identified nearly two dozen flaws scattered across 15 different ML-related projects. These weaknesses predominantly encompass server-side vulnerabilities that might empower malicious actors