Danswer-ai Danswer vulnerabilities

• danswer-ai danswer-ai/danswer, onyx +1 more Improper Access Control in danswer-ai/danswer CVE-2024-7767 6.5 MediumMarch 20, 2025
• danswer-ai danswer-ai/danswer, onyx +1 more Unauthorized Access in danswer-ai/danswer CVE-2024-9612 6.5 MediumMarch 20, 2025
• danswer-ai danswer-ai/danswer Improper Access Control in danswer-ai/danswer CVE-2024-8057 4.3 MediumMarch 20, 2025
• danswer-ai danswer-ai/danswer IDOR in danswer-ai/danswer CVE-2024-9617 6.5 MediumMarch 20, 2025
• danswer-ai danswer-ai/danswer Arbitrary File Overwrite in danswer-ai/danswer CVE-2024-7957 9.1 CriticalMarch 20, 2025
• danswer-ai danswer-ai/danswer CSRF in danswer-ai/danswer CVE-2024-8065 8.1 HighMarch 20, 2025
• danswer-ai danswer-ai/danswer Denial of Service in danswer-ai/danswer CVE-2025-0182 7.5 HighMarch 20, 2025
• danswer-ai danswer-ai/danswer Denial of Service in danswer-ai/danswer CVE-2024-8028 7.5 HighMarch 20, 2025
• danswer-ai danswer-ai/danswer CORS Misconfiguration in danswer-ai/danswer CVE-2024-7819 7.4 HighMarch 20, 2025
• danswer-ai danswer-ai/danswer ReDoS (Regular Expression Denial of Service) in danswer-ai/danswer CVE-2024-7779 7.5 HighMarch 20, 2025
• danswer-ai danswer Unauthorized access to GET/SET of Slack Bot Tokens in Danswer CVE-2024-32881 9.8 CriticalApril 26, 2024