AI coding assistants expose sensitive data and vLLM suffers denial of service

In the notable incidents, AI coding assistants improperly published over 13,000 internal images and sensitive documents from hundreds of organizations to public GitHub repositories, exposing data that included customer billing records and unreleased product features. Additionally, a flaw in vLLM allowed remote attackers to cause a denial of service via a vulnerability in the Gemma4 parser, for which an exploit was published. The week also had 10 disclosed vulnerabilities, down 49 from 59.