CVEs published in March 2025
4,012 vulnerabilities, 401 critical, 26 exploited.
- gradio-app gradio-app/gradio, gradio project gradio +1 moreOpen Redirect in gradio-app/gradio5.4 Medium
- gaizhenbiao chuanhuchatgpt, gaizhenbiao/chuanhuchatgpt +1 moreStored XSS in gaizhenbiao/chuanhuchatgpt5.4 Medium
- gradio-app gradio-app/gradio, gradio project gradio +1 morePath Traversal in gradio-app/gradio8.2 High
- prefecthq prefecthq/prefectCORS Misconfiguration in prefecthq/prefect7.6 High
- automatic1111 automatic1111/stable-diffusion-webui, stable-diffusion-webui +1 moreDenial of Service in automatic1111/stable-diffusion-webui6.5 Medium
- aimhubio aimhubio/aim, aimstack aim +1 moreUnrestricted Code Execution in aimhubio/aim5.9 Medium
- danswer-ai danswer-ai/danswer, onyx +1 moreUnauthorized Access in danswer-ai/danswer6.5 Medium
- gradio-app gradio-app/gradioPath Traversal in gradio-app/gradio5.3 Medium
- binary-husky binary-husky/gpt academic, gpt academic +1 moreArbitrary File Read via Upload Function in binary-husky/gpt_academic6.5 Medium
- infiniflow infiniflow/ragflow, ragflow +1 moreStored Cross-site Scripting (XSS) in infiniflow/ragflow5.4 Medium
- phpipam, phpipam phpipam/phpipam +1 moreStore XSS in phpipam/phpipam3.5 Low
- lunary, lunary-ai lunary-ai/lunary +1 moreBroken Access Control in lunary-ai/lunary7.5 High
- significant-gravitas significant-gravitas/autogpt, agpt autogpt platform +1 moreServer-Side Template Injection (SSTI) in significant-gravitas/autogpt8.8 High
- infiniflow infiniflow/ragflow, ragflow +1 moreRCE, Full Read SSRF, and Arbitrary File Read in infiniflow/ragflow6.5 Medium
- lunary, lunary-ai lunary-ai/lunary +1 moreRegular Expression Denial of Service (ReDoS) in lunary-ai/lunary7.5 High
- h2o, h2oai h2oai/h2o-3 +1 moreDenial of Service in h2oai/h2o-37.5 High
- gradio video, gradio-app gradio-app/gradio +1 moreDenial of Service in gradio-app/gradio7.5 High
- netease-youdao netease-youdao/qanything, qanything +1 moreCSRF due to overly permissive CORS headers in netease-youdao/qanything8.1 High
- lfprojects mlflow, mlflow mlflow/mlflow +1 moreDenial of Service through Batched Queries in GraphQL in mlflow/mlflow5.9 Medium
- gaizhenbiao chuanhuchatgpt, gaizhenbiao/chuanhuchatgpt +1 moreReDoS (Regular Expression Denial of Service) in gaizhenbiao/chuanhuchatgpt6.5 Medium
- dbgpt db-gpt, eosphoros-ai eosphoros-ai/db-gpt +1 moreArbitrary File Write in eosphoros-ai/db-gpt9.1 Critical
- modelscope agentscope, modelscope/agentscope +1 morePath Traversal in modelscope/agentscope9.1 Critical
- composio, composiohq composiohq/composio +1 moreSSRF in composiohq/composio6.8 Medium
- corydolphin corydolphin/flask-cors, flask-cors project flask-cors +1 moreCase-Insensitive Path Matching in corydolphin/flask-cors5.3 Medium
- lm-sys fastchat, lm-sys/fastchat +1 moreDenial of Service in lm-sys/fastchat7.5 High
- parisneo parisneo/lollms-webui, lollms web ui +1 morePath Traversal in parisneo/lollms-webui6.7 Medium
- onnx, onnx onnx/onnx +1 moreArbitrary File Overwrite in onnx/onnx8.1 High
- phpipam, phpipam phpipam/phpipam +1 moreCross-Site Scripting (XSS) in phpipam/phpipam3.5 Low
- gradio-app gradio-app/gradio, gradio project gradio +1 moreZip Bomb Vulnerability in gradio-app/gradio7.5 High
- composio, composiohq composiohq/composio +1 moreUnsafe eval usage in composiohq/composio7.2 High
- ollama, ollama ollama/ollama +1 moreDivide by Zero in ollama/ollama7.5 High
- langgenius dify, langgenius/dify +1 moreStored XSS in langgenius/dify6.8 Medium
- binary-husky gpt academic, binary-husky/gpt academic +1 moreLocal File Read (LFI) by Tarslip Symlink via arxiv_download() API in binary-husky/gpt_academic8.8 High
- aimhubio aimhubio/aim, aimstack aim +1 moreDenial of Service in aimhubio/aim7.5 High
- feast-dev feast-dev/feastCORS Vulnerability in feast-dev/feast7.4 High
- ollama, ollama ollama/ollama +1 moreNULL Pointer Dereference in ollama/ollama7.5 High
- shaunwei realchar, shaunwei/realchar +1 moreUnauthenticated Denial of Service in shaunwei/realchar7.5 High
- chatwoot, chatwoot chatwoot/chatwoot +1 moreStored XSS in chatwoot/chatwoot5.6 Medium
- corydolphin corydolphin/flask-cors, flask-cors project flask-cors +1 moreInconsistent CORS Matching Due to Handling of '+' in URL Path in corydolphin/flask-cors5.3 Medium
- aimhubio aimhubio/aim, aimstack aim +1 moreArbitrary File Overwrite through tarfile-extraction in aimhubio/aim9.1 Critical
- parisneo parisneo/lollms-webui, lollms web ui +1 moreInsufficient Patch Leading to DoS in parisneo/lollms-webui7.5 High
- h2o, h2oai h2oai/h2o-3 +1 moreDenial of Service in h2oai/h2o-37.5 High
- berriai berriai/litellmDenial of Service in BerriAI/litellm7.5 High
- danswer-ai danswer-ai/danswerImproper Access Control in danswer-ai/danswer4.3 Medium
- netease-youdao netease-youdao/qanything, youdao qanything +1 moreUnauthenticated DoS by Sending Large Filename at File Upload Endpoint in netease-youdao/qanything7.5 High
- gaizhenbiao chuanhuchatgpt, gaizhenbiao/chuanhuchatgpt +1 moreDenial of Service in gaizhenbiao/chuanhuchatgpt6.5 Medium
- llamaindex, run-llama run-llama/llama index +1 moreSQL Injection in run-llama/llama_index9.8 Critical
- binary-husky binary-husky/gpt academic, gpt academic +1 morePrompt Injection Leading to RCE in binary-husky/gpt_academic Plugin `manim`8.8 High
- berriai berriai/litellmImproper Authorization in BerriAI/litellm8.1 High
- infiniflow infiniflow/ragflowStored Cross-site Scripting (XSS) in infiniflow/ragflow5.4 Medium
- Show moreLoading…