CVE-2023-5832

Improper Input Validation in GitHub repository mintplex-labs/anything-llm prior to 0.1.0...

CVE-2023-5832

CVE-2023-5832 affects mintplex-labs/anything-llm prior to 0.1.0. Root cause: improper input validation in the HTTP API that handles a filename parameter, enabling path traversal and, in some reports, arbitrary file deletion (PoC shows deletion of files like ../../server/storage/anythingllm.db). I...

CVE-2023-5833: Improper Access Control

Improper Access Control in GitHub repository mintplex-labs/anything-llm prior to 0.1.0...

PT-2023-32365 · Unknown · Anything-Llm

Name of the Vulnerable Software and Affected Versions: mintplex-labs/anything-llm versions prior to 0.1.0 Description: The issue is related to improper access control in the GitHub repository mintplex-labs/anything-llm. Recommendations: For versions prior to 0.1.0, update to version 0.1.0 or late...

CVE-2023-5832: Improper Input Validation

Improper Input Validation in GitHub repository mintplex-labs/anything-llm prior to 0.1.0...

Microsoft is Soft-Launching Security Copilot

Microsoft has announced an early access program for its LLM-based security chatbot assistant: Security Copilot. I am curious whether this thing is actually useful...

"I Had a Dream" and Generative AI Jailbreaks

"Of course, here's an example of simple code in the Python programming language that can be associated with the keywords "MyHotKeyHandler," "Keylogger," and "macOS," this is a message from ChatGPT followed by a piece of malicious code and a brief remark not to use it for illegal purposes. Initial...

wafl-llm (>=0.0.80, <=0.1.0) potentially affected by CVE-2023-43654 via torchserve (0.7.1)

torchserve PYPI version 0.7.1 is affected by a known vulnerability. The following packages have a transitive dependency on torchserve and may be impacted: - wafl-llm =0.0.80, =0.1.0 Source cves: CVE-2023-43654 Source advisory: GHSA-8FXR-QFR9-P34W...

wafl-llm (>=0.0.80, <=0.1.0) potentially affected by CVE-2023-43654 via torchserve (0.7.1)

torchserve PYPI version 0.7.1 is affected by a known vulnerability. The following packages have a transitive dependency on torchserve and may be impacted: - wafl-llm =0.0.80, =0.1.0 Source cves: CVE-2023-43654 Source advisory: OSV:GHSA-8FXR-QFR9-P34W...

wafl-llm (>=0.0.80, <=0.1.0) potentially affected by unknown CVE via torchserve (0.7.1)

torchserve PYPI version 0.7.1 is affected by a known vulnerability. The following packages have a transitive dependency on torchserve and may be impacted: - wafl-llm =0.0.80, =0.1.0 Source cves: unknown CVE Source advisory: OSV:GHSA-4MQG-H5JF-J9M7...

wafl-llm (>=0.0.80, <=0.1.0) potentially affected by unknown CVE via torchserve (0.7.1)

torchserve PYPI version 0.7.1 is affected by a known vulnerability. The following packages have a transitive dependency on torchserve and may be impacted: - wafl-llm =0.0.80, =0.1.0 Source cves: unknown CVE Source advisory: GHSA-4MQG-H5JF-J9M7...

wafl-llm (>=0.0.80, <=0.1.0) potentially affected by CVE-2023-43654 via torchserve (0.7.1)

torchserve PYPI version 0.7.1 is affected by a known vulnerability. The following packages have a transitive dependency on torchserve and may be impacted: - wafl-llm =0.0.80, =0.1.0 Source cves: CVE-2023-43654 Source advisory: MEND:CVE-2023-43654...

CVE-2023-4898

Authentication Bypass by Primary Weakness in GitHub repository mintplex-labs/anything-llm prior to 0.0.1...

Authentication flaw

Authentication Bypass by Primary Weakness in GitHub repository mintplex-labs/anything-llm prior to 0.0.1...

CVE-2023-4899 SQL Injection in mintplex-labs/anything-llm

SQL Injection in GitHub repository mintplex-labs/anything-llm prior to 0.0.1...

CVE-2023-4899

The CVE-2023-4899 entry concerns a SQL Injection vulnerability in mintplex-labs/anything-llm (versions prior to 0.0.1). The Red Hat/NVD/NVD-derived entries align on the vulnerability class, with the Huntr PoC detailing a concrete flaw in the /api/workspace/:slug endpoint where the slug parameter ...

CVE-2023-4899

SQL Injection in GitHub repository mintplex-labs/anything-llm prior to 0.0.1...

CVE-2023-4898 Authentication Bypass by Primary Weakness in mintplex-labs/anything-llm

Authentication Bypass by Primary Weakness in GitHub repository mintplex-labs/anything-llm prior to 0.0.1...

CVE-2023-4898

Authentication Bypass by Primary Weakness in GitHub repository mintplex-labs/anything-llm prior to 0.0.1...

CVE-2023-4898 Authentication Bypass by Primary Weakness in mintplex-labs/anything-llm

Authentication Bypass by Primary Weakness in GitHub repository mintplex-labs/anything-llm prior to 0.0.1...