Lucene search
+L

10 matches found

PyPA
PyPA
•added 2026/10/01 4:38 p.m.•5 views

lightrag-hku: Sensitive Information Exposure Through Raw Exception Messages in API Error Responses

SummaryThe LightRAG API server passes raw Python exception messages directly into HTTPerror responses across 30+ error handlers in every router. When combined withthe default unauthenticated configuration see companion report on CWE-306, anynetwork-reachable client can trigger exceptions whose ra...

5.3CVSS5.7AI score0.00386EPSS
SaveExploits0References9Affected Software1
Rows per page
Query Builder