HumanSignal — Vulnerabilities & Security Advisories 12

HumanSignal provides a data labeling platform for machine learning training, with 12 CVEs recorded historically. Common vulnerabilities include remote code execution, cross-site scripting, and privilege escalation, often stemming from input validation flaws and improper access controls. The platform's web interface and API have been repeatedly affected by issues allowing unauthorized access or code execution. While no major public security incidents have been widely reported, the consistent pattern of vulnerabilities in web components suggests ongoing security challenges in maintaining secure access controls and input sanitization across their labeling infrastructure.