CVEs published in March 2025
4,012 vulnerabilities, 401 critical, 26 exploited.
- lunary, lunary-ai lunary-ai/lunary +1 moreStored Cross-Site Scripting (XSS) in lunary-ai/lunary7.3 High
- danny-avila danny-avila/librechat, librechat +1 moreMass Assignment in Preset Creation Allows User ID Manipulation in danny-avila/librechat4.6 Medium
- polyaxon polyaxon/polyaxonCross-Site Request Forgery (CSRF) in polyaxon/polyaxon6.5 Medium
- binary-husky binary-husky/gpt academic, gpt academic +1 morePath Traversal in binary-husky/gpt_academic8.8 High
- gradio-app gradio-app/gradio, gradio project gradio +1 moreRegular Expression Denial of Service (ReDoS) in gradio-app/gradio7.5 High
- gradio-app gradio-app/gradio, gradio project gradio +1 moreDenial of Service (DoS) by Sending Large Filename at File Upload Endpoint in gradio-app/gradio7.5 High
- stangirard stangirard/quivrDenial of Service (DoS) via Multipart Boundary in stangirard/quivr7.5 High
- langgenius dify, langgenius/dify +1 moreAuthentication Bypass in langgenius/dify8.1 High
- langgenius dify, langgenius/dify +1 moreCode Injection in langgenius/dify8.8 High
- superagi, transformeroptimus transformeroptimus/superagi +1 moreUnauthenticated Denial of Service in transformeroptimus/superagi7.5 High
- open-webui open-webui/open-webui, openwebui open webui +1 moreImproper Access Control in open-webui/open-webui8.1 High
- parisneo parisneo/lollms-webui, lollms web ui +1 moreCross-site Scripting (XSS) in parisneo/lollms-webui5.5 Medium
- vllm, vllm-project vllm-project/vllm +1 moreRemote Code Execution in vllm-project/vllm9.8 Critical
- lunary, lunary-ai lunary-ai/lunary +1 moreExposure of Private API Keys in lunary-ai/lunary8.8 High
- lunary, lunary-ai lunary-ai/lunary +1 moreImproper Path Equivalence Resolution in lunary-ai/lunary7.3 High
- haotian-liu haotian-liu/llava, hliu llava +1 moreOpen Redirect in haotian-liu/llava6.1 Medium
- pytorch pytorch/serveUnclaimed S3 Bucket Usage in pytorch/serve6.3 Medium
- binary-husky binary-husky/gpt academic, gpt academic +1 moreRemote Code Execution in binary-husky/gpt_academic8.8 High
- binary-husky binary-husky/gpt academic, gpt academic +1 moreCode Injection in binary-husky/gpt_academic8.8 High
- binary-husky binary-husky/gpt academic, gpt academic +1 moreDenial of Service in binary-husky/gpt_academic7.5 High
- superagi, transformeroptimus transformeroptimus/superagi +1 moreRemote Code Execution in transformeroptimus/superagi8.8 High
- binary-husky binary-husky/gpt academic, gpt academic +1 moreRegular Expression Denial of Service (ReDoS) in binary-husky/gpt_academic6.5 Medium
- danny-avila danny-avila/librechat, librechat +1 moreUnhandled Exception in danny-avila/librechat6.5 Medium
- phpipam, phpipam phpipam/phpipam +1 moreStored Cross-site Scripting (XSS) in phpipam/phpipam8.2 High
- imartinez imartinez/privategpt, pribai privategpt +1 moreDenial of Service (DOS) in imartinez/privategpt7.5 High
- parisneo parisneo/lollmsRemote Code Execution in Calculate Function in parisneo/lollms8.4 High
- comfy comfyui, comfyanonymous comfyanonymous/comfyui +1 moreSSRF in comfyanonymous/comfyui7.5 High
- netease-youdao netease-youdao/qanything, youdao qanything +1 moreStored Cross-Site Scripting (XSS) in netease-youdao/QAnything6.1 Medium
- h2o, h2oai h2oai/h2o-3 +1 moreEncryption of Arbitrary Files with Attacker-Controlled Key in h2oai/h2o-36.5 Medium
- binary-husky binary-husky/gpt academic, gpt academic +1 moreDenial of Service (DoS) in binary-husky/gpt_academic6.5 Medium
- phpipam, phpipam phpipam/phpipam +1 moreStored Cross-site Scripting (XSS) in phpipam/phpipam3.5 Low
- lunary, lunary-ai lunary-ai/lunary +1 moreRegular Expression Denial of Service (ReDoS) in lunary-ai/lunary7.5 High
- ollama ollama/ollamaOut-Of-Memory (OOM) Vulnerability in ollama/ollama7.5 High
- lm-sys fastchat, lm-sys/fastchat +1 moreServer Side Request Forgery in lm-sys/fastchat7.5 High
- lunary, lunary-ai lunary-ai/lunary +1 moreImproper Access Control in lunary-ai/lunary6.5 Medium
- mintplex-labs mintplex-labs/anything-llm, mintplexlabs anythingllm +1 moreExposure of Sensitive Information in mintplex-labs/anything-llm7.5 High
- binary-husky binary-husky/gpt academic, gpt academic +1 moreCSRF to XSS in binary-husky/gpt_academic7.1 High
- danswer-ai danswer-ai/danswerIDOR in danswer-ai/danswer6.5 Medium
- bentoml bentoml/openllmLocal File Inclusion in bentoml/openllm6.2 Medium
- binary-husky binary-husky/gpt academic, gpt academic +1 moreStored XSS in binary-husky/gpt_academic5.4 Medium
- haotian-liu haotian-liu/llava, hliu large language and vision assistant +1 moreCross-Site Request Forgery to XSS in haotian-liu/llava6.1 Medium
- open-webui open-webui/open-webui, openwebui open webui +1 moreStored XSS in open-webui/open-webui6.8 Medium
- quivr, stangirard stangirard/quivr +1 morePath Traversal in stangirard/quivr4.3 Medium
- wandb wandb/openuiStored Cross-site Scripting (XSS) in wandb/openui5.4 Medium
- modelscope agentscope, modelscope/agentscope +1 morePath Traversal in modelscope/agentscope9.1 Critical
- danswer-ai danswer-ai/danswerArbitrary File Overwrite in danswer-ai/danswer9.1 Critical
- lfprojects mlflow, mlflow mlflow/mlflow +1 moreWeak Password Requirements in mlflow/mlflow3.8 Low
- lfprojects mlflow, mlflow mlflow/mlflow +1 moreCSRF in mlflow/mlflow5.4 Medium
- h2o, h2oai h2oai/h2o-3 +1 moreArbitrary File Overwrite in h2oai/h2o-38.2 High
- vanna-ai vanna-ai/vannaLocal File Read (LFI) by Prompt Injection via SnowFlake SQL in vanna-ai/vanna7.5 High
- Show moreLoading…