CVEs published in March 2025
4,012 vulnerabilities, 401 critical, 26 exploited.
- berriai berriai/litellm, litellm +1 moreDenial of Service (DoS) in berriai/litellm7.5 High
- dbgpt db-gpt, eosphoros-ai eosphoros-ai/db-gpt +1 moreArbitrary File Upload with Path Traversal in eosphoros-ai/db-gpt9.1 Critical
- invoke-ai invoke-ai/invokeaiDenial of Service (DoS) in invoke-ai/invokeai7.5 High
- danny-avila danny-avila/librechat, librechat +1 moreLogs Debug Injection in danny-avila/librechat4.3 Medium
- binary-husky gpt academic, binary-husky/gpt academic +1 moreSSRF in binary-husky/gpt_academic7.7 High
- phpipam, phpipam phpipam/phpipam +1 moreStored Cross-site Scripting (XSS) in phpipam/phpipam3.5 Low
- lunary, lunary-ai lunary-ai/lunary +1 moreImproper Role Modification by Admins for Billing Permissions in lunary-ai/lunary7.3 High
- mudler localai, mudler/localai +1 moreCross-Site Scripting (XSS) in mudler/localai5.4 Medium
- dify, langgenius langgenius/dify +1 moreServer-Side Request Forgery (SSRF) in langgenius/dify6.5 Medium
- significant-gravitas significant-gravitas/autogpt, agpt autogpt classic +1 moreCommand Injection in significant-gravitas/autogpt8.8 High
- llamaindex, run-llama run-llama/llama index +1 moreDenial of Service in run-llama/llama_index4.2 Medium
- dify, langgenius langgenius/dify +1 morePandas Query Injection in langgenius/dify8.8 High
- lfprojects mlflow, mlflow mlflow/mlflow +1 moreUncontrolled Resource Consumption in mlflow/mlflow5.3 Medium
- gaizhenbiao chuanhuchatgpt, gaizhenbiao/chuanhuchatgpt +1 moreSSRF in gaizhenbiao/chuanhuchatgpt6.5 Medium
- danny-avila danny-avila/librechat, librechat +1 moreArbitrary File Deletion via Path Traversal in danny-avila/librechat8.1 High
- langgenius dify, langgenius/dify +1 moreStored XSS in langgenius/dify5.8 Medium
- dbgpt db-gpt, eosphoros-ai eosphoros-ai/db-gpt +1 moreArbitrary File Write through Absolute Path Traversal in eosphoros-ai/db-gpt9.1 Critical
- changeweb changeweb/unifiedtransformAccess Control Vulnerabilities lead to Violation of Privacy and Modification of Personal Data7.1 High
- superagi, transformeroptimus transformeroptimus/superagi +1 morePath Traversal in transformeroptimus/superagi8.8 High
- llamaindex, run-llama run-llama/llama index +1 moreDenial of Service (DoS) in run-llama/llama_index7.5 High
- lunary, lunary-ai lunary-ai/lunary +1 moreImproper Authorization in lunary-ai/lunary6.5 Medium
- aimhubio aimhubio/aim, aimstack aim +1 moreCSRF in aimhubio/aim7.4 High
- h2o, h2oai h2oai/h2o-3 +1 moreJdbc Deserialization in h2oai/h2o-39.8 Critical
- danswer-ai danswer-ai/danswerCORS Misconfiguration in danswer-ai/danswer7.4 High
- comfy comfyui, comfyanonymous comfyanonymous/comfyui +1 moreCross-Site Request Forgery (CSRF) in comfyanonymous/comfyui6.5 Medium
- lunary, lunary-ai lunary-ai/lunary +1 moreIDOR Vulnerability in PATCH `/v1/runs/:id/score` Endpoint in lunary-ai/lunary7.5 High
- langgenius dify, langgenius/dify +1 morePrivilege Escalation in langgenius/dify4.3 Medium
- danny-avila danny-avila/librechat, librechat +1 morePath Traversal in danny-avila/librechat8.8 High
- haotian-liu haotian-liu/llava, hliu llava +1 moreServer-Side Request Forgery in haotian-liu/llava7.5 High
- binary-husky binary-husky/gpt academic, gpt academic +1 morePath Traversal in binary-husky/gpt_academic6.5 Medium
- lunary, lunary-ai lunary-ai/lunary +1 moreRegular Expression Denial of Service (ReDoS) in lunary-ai/lunary7.5 High
- brycedrennan brycedrennan/imaginairyDenial of Service in brycedrennan/imaginairy7.5 High
- haotian-liu haotian-liu/llava, hliu llava +1 moreDenial of Service in haotian-liu/llava7.5 High
- haotian-liu haotian-liu/llava, hliu large language and vision assistant +1 moreServer-Side Request Forgery in haotian-liu/llava7.5 High
- danswer-ai danswer-ai/danswerReDoS (Regular Expression Denial of Service) in danswer-ai/danswer7.5 High
- invoke-ai invoke-ai/invokeaiArbitrary File Delete in invoke-ai/invokeai9.1 Critical
- dbgpt db-gpt, eosphoros-ai eosphoros-ai/db-gpt +1 moreArbitrary File Deletion in eosphoros-ai/DB-GPT8.2 High
- lunary, lunary-ai lunary-ai/lunary +1 moreImproper Access Control in lunary-ai/lunary9.8 Critical
- zenml, zenml-io zenml-io/zenml +1 moreDenial of Service (DoS) via Multipart Boundary in zenml-io/zenml7.5 High
- parisneo parisneo/lollmsMissing check_access in lollms_binding_infos in parisneo/lollms8.0 High
- mintplex-labs mintplex-labs/anything-llm, mintplexlabs anythingllm +1 moreDenial of Service in mintplex-labs/anything-llm6.5 Medium
- automatic1111 automatic1111/stable-diffusion-webui, stable-diffusion-webui +1 moreStored XSS in automatic1111/stable-diffusion-webui6.1 Medium
- aimhubio aimhubio/aim, aimstack aim +1 moreDenial of Service in aimhubio/aim7.5 High
- mintplex-labs mintplex-labs/anything-llm, mintplexlabs anythingllm +1 morePrisma Injection in mintplex-labs/anything-llm5.3 Medium
- lightning-ai lightning-ai/pytorch-lightning, lightningai pytorch lightning +1 moreArbitrary File Write/Overwrite in lightning-ai/pytorch-lightning9.1 Critical
- langchain-ai langchain-ai/langchainExposure of Sensitive System Information via ImagePromptTemplate in langchain-ai/langchain5.3 Medium
- lunary, lunary-ai lunary-ai/lunary +1 moreImproper Privilege Management in lunary-ai/lunary6.5 Medium
- lunary, lunary-ai lunary-ai/lunary +1 moreImproper Authorization in lunary-ai/lunary9.8 Critical
- ollama, ollama ollama/ollama +1 moreDoS using malicious gguf model file in ollama/ollama7.5 High
- szad670401 szad670401/hyperlprDenial of Service (DoS) via Multipart Request in szad670401/hyperlpr7.5 High
- Show moreLoading…