danswer-ai danswer-ai/danswer vulnerabilities
10 published CVEs name danswer-ai danswer-ai/danswer among the affected products.
- Published CVEs
- 10
- Last 12 months
- 0
- Critical
- 1
- Known exploited
- 0
Critical 1High 5Medium 4Low 0Not scored 0
Newest CVEs
- CVE-2024-7767
Improper Access Control in danswer-ai/danswer
danswer-ai · danswer-ai/danswer
Medium6.5 - CVE-2024-9612
Unauthorized Access in danswer-ai/danswer
danswer-ai · danswer-ai/danswer
Medium6.5 - CVE-2024-8057
Improper Access Control in danswer-ai/danswer
danswer-ai · danswer-ai/danswer
Medium4.3 - CVE-2024-9617
IDOR in danswer-ai/danswer
danswer-ai · danswer-ai/danswer
Medium6.5 - CVE-2024-7957
Arbitrary File Overwrite in danswer-ai/danswer
danswer-ai · danswer-ai/danswer
Critical9.1 - CVE-2024-8065
CSRF in danswer-ai/danswer
danswer-ai · danswer-ai/danswer
High8.1 - CVE-2025-0182
Denial of Service in danswer-ai/danswer
danswer-ai · danswer-ai/danswer
High7.5 - CVE-2024-8028
Denial of Service in danswer-ai/danswer
danswer-ai · danswer-ai/danswer
High7.5 - CVE-2024-7819
CORS Misconfiguration in danswer-ai/danswer
danswer-ai · danswer-ai/danswer
High7.4 - CVE-2024-7779
ReDoS (Regular Expression Denial of Service) in danswer-ai/danswer
danswer-ai · danswer-ai/danswer
High7.5
Most common weaknesses
- CWE-770 Allocation of resources without limits2
- CWE-1100 1
- CWE-1333 Regular expression denial of service (ReDoS)1
- CWE-29 1
- CWE-306 Missing authentication for a critical function1
- CWE-346 1
- CWE-352 Cross-site request forgery (CSRF)1
- CWE-639 Authorization bypass through a user-controlled key (IDOR)1
- CWE-862 Missing authorization1