---
title: "Discussion on \"I Found 5 Security Vulnerabilities in XGBoost. Here's What Happened.\" | Hashnode"
description: "Discussion on \"I Found 5 Security Vulnerabilities in XGBoost. Here's What Happened.\". 5 vulnerabilities across memory safety, deserialization, and auth. Zero patches. But XGBoost published its first security page because of my research."
url: "https://hashnode.com/posts/i-found-5-security-vulnerabilities-in-xgboost-here-s-what-happened/69c8db407816e434a007e33e"
---

[Feed](https://hashnode.com/feed) /

Discussion

# [I Found 5 Security Vulnerabilities in XGBoost. Here's What Happened.](https://aviraxroot.hashnode.dev/i-found-5-security-vulnerabilities-in-xgboost-here-s-what-happened?utm_source=hashnode&utm_medium=feed)

5 vulnerabilities across memory safety, deserialization, and auth. Zero patches. But XGBoost published its first security page because of my research.

Mar 29 · 10 min read · aviraxroot.hashnode.dev  
Read the article

-   [#machine-learning](https://hashnode.com/tag/machine-learning)
-   [#cybersecurity](https://hashnode.com/tag/cybersecurity)
-   [#xgboost](https://hashnode.com/tag/xgboost)
-   [#ai-security](https://hashnode.com/tag/ai-security)
-   [#vulnerability-research](https://hashnode.com/tag/vulnerability-research)

## Written by

[aviral srivastava](https://hashnode.com/@aviralxroot)

@aviralxroot · Sunnyvale, USA

  
[View profile](https://hashnode.com/@aviralxroot)

Offensive AI Security & Exploit Development

I explore the offensive side of cybersecurity through exploit research, AI security, and vulnerability discovery. Here, I document real bugs, attack paths, and technical deep dives into how modern software and AI systems fail.

## Responses

Markdown supported · ⌘↵ to post

No responses yet.