Danswer Access Control Vulnerability

Danswer is Danswer AI open source an artificial intelligence assistant that connects to company documents, applications and people. An access control error vulnerability exists in Danswer version v0.3.94 that stems from the application not validating the file creator, which could allow an attacke...

Lunary security vulnerabilities

lunary is lunary open source a production toolkit for LLM . An information disclosure vulnerability exists in lunary that stems from a GET /projects API endpoint exposing all project public and private API keys to users with least privileges, which can be exploited by an attacker to obtain...

AutoGPT code issues and vulnerabilities

AutoGPT is a tool from AutoGPT Open Source. Used to make accessible AI available and buildable for everyone. A code issue vulnerability exists in versions prior to AutoGPT v0.4.0 that stems from a server-side request forgery vulnerability in the Requests tool that could lead to an SSRF attack...

RAGFlow security vulnerabilities

RAGFlow is an open source RAG engine based on deep document understanding from InfiniFlow Open Source. A security vulnerability exists in RAGFlow version 0.12.0 that originates from an unvalidated URL and could lead to a server-side request forgery attack...

Quivr security vulnerabilities

Quivr is an artificial intelligence application open-sourced by Quivr. A security vulnerability exists in Quivr that stems from a path traversal that allows an attacker to upload a file to an arbitrary path in an S3 bucket...

Dify code issue vulnerabilities

dify is an open source LLM application development platform from LangGenius Open Source. A code issue vulnerability exists in version 0.10.1 of dify, which stems from an unvalidated URL and could lead to a server-side request forgery attack...

Applio code issues and vulnerabilities

Applio is an open source AI voice conversion tool from Spanish AI Hispano. A code issue vulnerability exists in Applio 3.2.7 and earlier versions, which stems from a server-side request forgery and file write issue in modeldownload.py, which could lead an attacker to send a request on behalf of t...

Reviewdog security vulnerabilities

Reviewdog is an open source automated code review tool from Reviewdog. A security vulnerability exists in Reviewdog that stems from malicious code that could leak exposed keys...

Applio code issues and vulnerabilities

Applio is an open source AI speech conversion tool from Spanish AI Hispano. A code issue vulnerability exists in Applio 3.2.8-bugfix and prior versions, which stems from an insecure deserialization issue in modelinformation.py that could lead to remote code execution...

CVE-2025-29790 Contao allows cross-site scripting through SVG uploads

Contao is an Open Source CMS. Users can upload SVG files with malicious code, which is then executed in the back end and/or front end. This vulnerability is fixed in Contao 4.13.54, 5.3.30, or 5.5.6...

GLPI SQL injection vulnerability

GLPI is an open source IT and asset management software from GLPI Open Source. The software provides a full-featured IT resource management interface that you can use to build databases to fully manage IT computers, monitors, servers, printers, network devices, phones, and even toner and ink...

MongoDB Server security vulnerabilities

MongoDB Server is a set of open source NoSQL databases from the American company MongoDB. The database provides collection-oriented storage, dynamic querying, data replication and automatic failover. A security vulnerability exists in MongoDB Server that stems from a buffer overflow that could...

Linux kernel improper locking vulnerability (CNVD-2025-05316)

Linux kernel is the kernel used by Linux, the open source operating system of the Linux Foundation in the United States. Linux kernel suffers from an improper locking vulnerability that stems from the use of spinlock in an interruptible context, which could lead to a deadlock. The vulnerability c...

grafana security update

An update is available for grafana. This update affects Rocky Linux 9. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list Grafana is an open source, feature rich metrics dashboard and graph editor fo...

samba bug fix update

An update is available for samba. This update affects Rocky Linux 9. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list Samba is an open-source implementation of the Server Message Block SMB protocol...

[SECURITY] Fedora 42 Update: chromium-134.0.6998.88-3.fc42

Chromium is an open-source web browser, powered by WebKit Blink...

ALSA-2025:2868 Important: libreoffice security update

LibreOffice is an open source, community-developed office productivity suite. It includes key desktop applications, such as a word processor, a spreadsheet, a presentation manager, a formula editor, and a drawing program. LibreOffice replaces OpenOffice and provides a similar but enhanced and...

Code-Projects Blood Bank Management System security vulnerabilities

Code-Projects Blood Bank Management System is an open source blood bank management system from Code-Projects. A security vulnerability exists in Code-Projects Blood Bank Management System version 1.0, which originates from an SQL injection...

Code-Projects Blood Bank Management System Injection Vulnerability

Code-Projects Blood Bank Management System is an open source blood bank management system from Code-Projects. An injection vulnerability exists in Code-Projects Blood Bank Management System version 1.0, which originates from an SQL injection...

Agarite cross-site scripting vulnerabilities

Agate is an Open Source Software for Epidemiology open source a user ID provider for OBiBa. A cross-site scripting vulnerability exists in Agate versions prior to 3.3.0 that stems from HTML injection and could lead to phishing attacks...