AN
Product
Anythingllm
68
CVEs
0
On KEV
9.9
Max CVSS
0
New 30D
Severity mix
Critical 8High 35Medium 22Low 3
Watch
Add Anythingllm to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2024-3025 | 9.9 | Apr 10 | Path Traversal in mintplex-labs/anything-llm Affected: before 1.0.0 |
| CVE-2024-3104 | 9.8 | Jun 6 | Remote Code Execution in mintplex-labs/anything-llm Affected: before 1.0.0 |
| CVE-2023-4897 | 9.8 | Sep 11 | Relative Path Traversal in mintplex-labs/anything-llm Affected: before 0.0.1 |
| CVE-2026-32626 | 9.6 | Mar 13 | AnythingLLM has a Streaming Phase XSS to RCE via LLM Response Injection Affected: through 1.11.1 |
| CVE-2024-3033 | 9.4 | Jun 6 | Improper Authorization in mintplex-labs/anything-llm Affected: before 1.0.0 |
| CVE-2024-3279 | 9.1 | Aug 9 | Improper Access Control in mintplex-labs/anything-llm Affected: before 1.0.0 |
| CVE-2024-0404 | 9.1 | Apr 16 | Mass Assignment Vulnerability in mintplex-labs/anything-llm Affected: before 1.0.0 |
| CVE-2023-5832 | 9.1 | Oct 30 | Improper Input Validation in mintplex-labs/anything-llm Affected: before 0.1.0 |
Showing 8