๐Ÿš€ ML-Gateway 1.0.0 is out!

First stable release, focused on production readiness:

โ€ข Per-worker LRU cache to avoid redundant inference
โ€ข Efficient multi-core serving with `gunicorn --preload` (shared model memory, faster startup behavior)
โ€ข Cleaner model registry (removed broken entries)

Designed to handle concurrent workloads without wasting memory or cycles.

๐Ÿ”— https://github.com/vulnerability-lookup/ML-Gateway

#AI #Python #NLP #OpenSource #Vulnerabiity #MCP

Two cybersecurity researchers recently uncovered a significant vulnerability in the FlyCASS system, which manages the Known Crewmember (KCM) and Cockpit Access Security System (CASS) programs for airlines. This flaw could potentially allow unauthorized individuals to gain access to sensitive areas of airports and even fly in aircraft cockpits.

The researchers discovered that the FlyCASS login page was susceptible to a simple SQL injection attack. By inserting malicious SQL code into the username field, they were able to bypass the login system and gain administrative access to the database.

Once inside, they found they could add any name to the list of approved pilots and crew members without any additional checks. This meant anyone with basic knowledge of SQL injection could potentially log in and add themselves to the KCM and CASS lists.

https://www.theregister.com/2024/08/30/sql_injection_known_crewmember/

#cybersecurity #vulnerabiity #sql #sql_injection #attack #flycass #login #kcm #cass #airlines

Tired of airport security queues? SQL inject yourself into the cockpit, claim researchers

Infosec hounds say they spotted vulnerability during routine travel in the US

The Register