For the benefit of readers: This is apparently a list of vulnerabilities that were found with the help of Z.ai's models (presumably GLM-5.3), not vulnerabilities in Z.ai's software or services.

Also, it's in Chinese by default but there's a not-super-conspicuous button in the top-right corner to switch to English.

I wonder if people still think that the hf incident was an OpenAI "marketing stunt". Out of everyone involved in this kerfuffle, hf and zai are riding the PR wave, while oAI is getting laughed at, having congressional letters thrown at them and so on...