<?xml version="1.0" encoding="UTF-8"?>
<urlset xmlns="http://www.sitemaps.org/schemas/sitemap/0.9"
        xmlns:news="http://www.google.com/schemas/sitemap-news/0.9"
        xmlns:image="http://www.google.com/schemas/sitemap-image/1.1">
  <url>
    <loc>https://laautopsia.com/vulnerabilidad/idor-librechat-076-permite-sobrescribir-claves-api-cualquier</loc>
    <image:image>
      <image:loc>https://storage.googleapis.com/autopsia-45ba4.firebasestorage.app/vulnerabilities/CVE-2026-31942/apisdom-autopsia-alertas-a4-2026-09-1.webp</image:loc>
    </image:image>
    <news:news>
      <news:publication>
        <news:name>La AutopsIA</news:name>
        <news:language>es</news:language>
      </news:publication>
      <news:publication_date>2026-09-01T20:19:00.267Z</news:publication_date>
      <news:title>IDOR en LibreChat hasta 0.7.6 permite sobrescribir claves API de cualquier usuario autenticado</news:title>
    </news:news>
  </url>
  <url>
    <loc>https://laautopsia.com/vulnerabilidad/ssrf-sitemaploader-langchaincommunity-afecta-aplicaciones-restringen-dominios-salida</loc>
    <image:image>
      <image:loc>https://storage.googleapis.com/autopsia-45ba4.firebasestorage.app/vulnerabilities/CVE-2026-72848/apisdom-autopsia-alertas-a3-2026-09-1.webp</image:loc>
    </image:image>
    <news:news>
      <news:publication>
        <news:name>La AutopsIA</news:name>
        <news:language>es</news:language>
      </news:publication>
      <news:publication_date>2026-09-01T20:09:52.439Z</news:publication_date>
      <news:title>SSRF en SitemapLoader de langchain_community afecta aplicaciones que restringen dominios de salida</news:title>
    </news:news>
  </url>
  <url>
    <loc>https://laautopsia.com/vulnerabilidad/dos-remoto-vllmproject-vllm-0190-afecta-ruta-servicio</loc>
    <image:image>
      <image:loc>https://storage.googleapis.com/autopsia-45ba4.firebasestorage.app/vulnerabilities/CVE-2026-9540/apisdom-autopsia-alertas-a2-2026-09-1.webp</image:loc>
    </image:image>
    <news:news>
      <news:publication>
        <news:name>La AutopsIA</news:name>
        <news:language>es</news:language>
      </news:publication>
      <news:publication_date>2026-09-01T19:46:11.702Z</news:publication_date>
      <news:title>DoS remoto en vllm-project vllm 0.19.0 afecta la ruta de servicio compatible con OpenAI</news:title>
    </news:news>
  </url>
  <url>
    <loc>https://laautopsia.com/vulnerabilidad/rce-mlflow-mlflowstatsmodels-omite-proteccion-contra-deserializacion-pickle</loc>
    <image:image>
      <image:loc>https://storage.googleapis.com/autopsia-45ba4.firebasestorage.app/vulnerabilities/GHSA-gqvg-gmmx-x4hm/apisdom-autopsia-alertas-a1-2026-09-1.webp</image:loc>
    </image:image>
    <news:news>
      <news:publication>
        <news:name>La AutopsIA</news:name>
        <news:language>es</news:language>
      </news:publication>
      <news:publication_date>2026-09-01T19:28:37.857Z</news:publication_date>
      <news:title>RCE en MLflow: fallo en mlflow.statsmodels con pickle</news:title>
    </news:news>
  </url>
  <url>
    <loc>https://laautopsia.com/noticia/autopsia-riesgo-agentes-memoria-rag-bajo</loc>
    <image:image>
      <image:loc>https://storage.googleapis.com/autopsia-45ba4.firebasestorage.app/incidents/manual-1788154927757-qt8mz2/la-autopsia-del-riesgo-2-entrega-31-8-2026-apisdom-juanlu.webp</image:loc>
    </image:image>
    <news:news>
      <news:publication>
        <news:name>La AutopsIA</news:name>
        <news:language>es</news:language>
      </news:publication>
      <news:publication_date>2026-08-31T08:40:10.938Z</news:publication_date>
      <news:title>La AutopsIA del riesgo: agentes, memoria y RAG bajo fuego</news:title>
    </news:news>
  </url>
</urlset>