license: cc-by-4.0
language:
- en
size_categories: - n<1K
pretty_name: 0DIN Public GenAI Vulnerability Disclosures
tags: - ai-safety
- red-teaming
- jailbreak
- prompt-injection
- vulnerability-disclosure
- genai
task_categories: - text-classification
configs: - config_name: default
data_files:- split: train
path: vulnerabilities.jsonl
- split: train
0DIN Public GenAI Vulnerability Disclosures
A weekly export of the public vulnerability disclosures published by
0DIN, the 0Day Investigative Network — Mozilla's
responsible-disclosure program for GenAI security.
The authoritative sources are two pages on 0din.ai:
- 0DIN disclosures — metadata for every published
disclosure. - 0DIN threat feed — the subset of disclosures
publicly rendered with full content (prompts, responses, variant prompts,
detection signature).
Every record in vulnerabilities.jsonl mirrors the disclosures page.
Records whose uuid is also on the public threat feed additionally include
the content fields rendered at /threatfeed/<uuid>/public — see theon_public_threat_feed flag below.
Layout
vulnerabilities.jsonl— one JSON object per line. Records are ordered bypublished_atdescending, thenuuidascending.manifest.json— generated_at, dataset_name, dataset_schema_version,
record_count, source URL, and the publisher's git SHA.README.md— this file.
Schema
Each record contains:
| Field | Type | Notes |
|---|---|---|
uuid |
string | Stable disclosure identifier. |
title |
string | Human-readable title. |
summary |
string | Short description of the vulnerability. |
severity |
string | One of low, medium, high, severe. |
security_boundary |
string | One of 0DIN's Security Boundaries. |
social_impact_level |
int | null | Social Impact Score (1–5) if assessed. |
nude_imagery_score_level |
int | null | NIRS (1–5) if assessed. |
taxonomy |
array | Jailbreak Taxonomy triplets: {category, strategy, technique, security_boundary}. |
test_results |
array | Visible-only: {model, vendor, test_type, result, temperature}. |
models |
array | Affected models: {name, vendor}. |
researcher_credit |
string | null | "Anonymous", the researcher's chosen public credit, or null when no public credit was supplied. |
reference_urls |
array of string | External references. |
disclosed_at |
ISO 8601 string | When the disclosure transitioned to the disclosed state. |
published_at |
ISO 8601 string | When the disclosure was made public. |
on_public_threat_feed |
bool | true when the disclosure is publicly rendered at /threatfeed/<uuid>/public. When true, the four fields below are present (possibly empty or null). When false, they are absent from the JSON object entirely. |
Public threat-feed fields (only when on_public_threat_feed is true)
| Field | Type | Notes |
|---|---|---|
messages |
array | Pinned messages publicly rendered for this disclosure: {prompt, response, model_name, interface}. Mirrors Vulnerability#pinned_messages in 0DIN. May be an empty array. |
variant_prompts |
array | {prompt, key_changes, rationale, industry, industry_parent}. May be an empty array. |
detection_signature |
string | null | Current-version 0DIN detection signature, formatted as 0din-{version}:{hex} to match what 0din.ai renders. null when no signature exists at the current version. |
Excluded by Design
The following are intentionally absent from this dataset, even when present in
the source database:
- Prompts, model responses, messages, variant prompts, and detection
signatures for disclosures not on the public threat-feed allowlist.
For allowlisted disclosures (on_public_threat_feed = true), only the
fields already publicly rendered at/threatfeed/<uuid>/publicare
included — pinned messages, variant prompts (with industry grouping
preserved), and the current-version detection signature. Non-pinned
messages, attack payloads, attachments, and IP addresses are excluded
unconditionally. - Submitter PII other than a self-supplied public credit string. Researcher
first/last names are never exported. - Any
Vulnerability::Metadatumrows other thanSocialImpactandNudeImageryScore.
Suppressed disclosures cannot enter the published state and are excluded by
0DIN's publishing pipeline before they reach this export.
License
Creative Commons Attribution 4.0 International (CC-BY-4.0).
Attribute 0DIN (https://0din.ai) when redistributing or building on this
dataset.