From prompt injection to deepfake fraud, security researchers say several flaws have no known fix. Here's what to know about them.