在Starlette中发现了一个名为“BadHost”的关键漏洞，Starlette是一个开源Python框架，每周下载量达3.25亿次。该漏洞对包括FastAPI和vLLM在内的AI基础设施构成了重大风险，可能危及数百万个AI代理。Starlette的广泛使用凸显了对支撑AI生态系统大部分基础开源包安全性的担忧。 AI
影响 强调了为AI代理和基础设施提供支持的开源基础需要强大安全性的关键需求。
排序理由 该集群报道了AI开发中广泛使用的开源包中存在的漏洞，影响了工具和基础设施。
在 Mastodon — fosstodon.org 阅读 →
AI 生成摘要 · Google Gemini · 来自 6 个来源。 我们如何撰写摘要 →
Critical Starlette bug BadHost threatens AI infrastructure including FastAPI and vLLM, Claude faces benchmark cheating claims, and Robinhood eyes LLM-powered brokerage accounts as Cognition doubles its valuation. https:// ai0.news/posts/2026-05-28-dail y-digest/ # AI # Cybersecur…
A Critical Bug in a 325M-Download Package Put Millions of AI Agents at Risk https:// firethering.com/badhost-starle tte-critical-vulnerability-ai-agents/ # aiagents # ainews # technews # coding # ai # trending # security
Millions of # AI agents imperiled by critical vulnerability in open source package “BadHost” was found in Starlette, a package with 325 million weekly downloads. https:// arstechnica.com/information-te chnology/2026/05/millions-of-ai-agents-imperiled-by-critical-vulnerability-in-…
Millions of AI agents are vulnerable to a critical flaw in Starlette, the open-source framework used by FastAPI and other popular tools. The BadHost bug allows hackers to breach servers running MCP and steal credentials to databases and email accounts. https:// arstechnica.com/in…
📰 Millions of AI agents imperiled by critical vulnerability in open source package "BadHost" was found in Starlette, a package with 325 million weekly downloads. 📰 Source: Ars Technica 🔗 Link: https://arstechnica.com/information-technology/2026/05/millions-of-ai-agents-imperiled-…
With 325 million weekly downloads, Starlette's vulnerability exposes a vast attack surface. Can we ensure the security of open-source foundations? # AI # Cybersecurity # OpenSource https:// arstechnica.com/information-te chnology/2026/05/millions-of-ai-agents-imperiled-by-critica…