gcdRadar
tags/Attack types

path-traversal

1 live · 132 on record · last incident 2 days ago

Dec ’25records per month, by first reportNov ’26

Live1

  1. live9.8
    FortiMail FortiMail path traversal enables unauthorized code execution

    Patch now · Disclosed · since 10 Nov 2026

    An improper limitation of a pathname (CWE‑22) in FortiMail allows an unauthenticated attacker to traverse directories and execute unauthorized code via crafted requests. The issue is rated CVSS v3 9.8, marking it as a critical vulnerability.

Earlier131

  1. closed
    ComfyUI + custom nodes CVE-2026-123790: ComfyUI‑Easy‑Use path traversal allows code execution

    Patch now · Disclosed · since 12 Nov 2026 · CVE-2026-123790

    AI
  2. closed7.7
    Claude Code + SDKs CVE-2026-88968: Path traversal flaw in Claude Code allows arbitrary file overwrite

    Patch now · Disclosed · Patched · since 3 Nov 2026 · updated 9 Nov 2026 · CVE-2026-88968

    AI
  3. closed8.2
    praktor CVE-2026-62331: praktor Path Traversal Vulnerability

    Patch now · Disclosed · Patched · since 30 Oct 2026 · CVE-2026-62331

    AI
  4. closed6.5
    Langflow CVE-2026-110190: IBM Langflow OSS Directory Traversal Vulnerability

    Patch now · Disclosed · since 29 Oct 2026 · CVE-2026-110190

    AI
  5. closed8.8
    Visual Studio Copilot CVE-2026-103572: Remote code execution in Visual Studio Copilot

    Patch now · Disclosed · since 13 Oct 2026 · CVE-2026-103572

    AI
  6. closed4.7
    obsidian-tc CVE-2026-77361: obsidian-tc MCP server symlink path traversal vulnerability

    Patch now · Disclosed · since 13 Oct 2026 · CVE-2026-77361

    AI
  7. closed9.4
    Ollama Ollama vulnerable to path traversal leading to remote code execution

    Patch now · Disclosed · since 8 Oct 2026 · CVE-2026-103663

    AI
  8. closed6.5
    Langflow CVE-2026-97671: IBM Langflow OSS Path Traversal Vulnerability

    Patch now · Disclosed · since 7 Oct 2026 · CVE-2026-97671

    AI
  9. closed8.1
    Langflow CVE-2026-103360: IBM Langflow OSS path limitation vulnerability

    Patch now · Disclosed · since 7 Oct 2026 · CVE-2026-103360

    AI
  10. closed6.5
    Langflow CVE-2026-93448: IBM Langflow OSS path traversal information disclosure

    Patch now · Disclosed · since 7 Oct 2026 · CVE-2026-93448

    AI
  11. closed9.1
    Langchain-Chatchat CVE-2026-51882: Path traversal vulnerability in Langchain-Chatchat file upload

    Patch now · Disclosed · since 1 Oct 2026 · CVE-2026-51882

    AI
  12. closed9.8
    Langchain-Chatchat CVE-2026-51884: Path traversal in Langchain Chatchat upload endpoint

    Patch now · Disclosed · since 1 Oct 2026 · CVE-2026-51884

    AI
  13. closed9.1
    Langchain-Chatchat CVE-2026-51883: Path traversal vulnerability in Langchain-Chatchat

    Patch now · Disclosed · since 1 Oct 2026 · CVE-2026-51883

    AI
  14. closed7.5
    Langflow CVE-2026-51888: Directory traversal flaw in Langflow

    Patch now · Disclosed · since 1 Oct 2026 · CVE-2026-51888

    AI
  15. closed6.5
    MCP servers & tools CVE-2026-77266: MCP Atlassian allows absolute paths and traversal during upload

    Patch now · Disclosed · since 22 Sep 2026 · CVE-2026-77266

    AI
  16. closed8.6
    MCP servers & tools CVE-2026-77262: MCP Atlassian suffers from path traversal in file uploads

    Patch now · Disclosed · since 22 Sep 2026 · CVE-2026-77262

    AI
  17. closed8.5
    ComfyUI + custom nodes CVE-2026-92816: ComfyUI path traversal leads to code execution

    Patch now · Disclosed · since 16 Sep 2026 · CVE-2026-92816

    AI
  18. closed6.9
    MCP servers & tools CVE-2026-57441: MCPVault contains path filter bypass vulnerability

    Patch now · Disclosed · since 15 Sep 2026 · CVE-2026-57441

    AI
  19. closed6.9
    MCP servers & tools CVE-2026-57442: Path restriction bypass vulnerability in MCPVault

    Patch now · Disclosed · since 15 Sep 2026 · CVE-2026-57442

    AI
  20. closed7.7
    MCP servers & tools CVE-2026-73496: MCP Atlassian vulnerable to arbitrary file upload and path traversal

    Patch now · Disclosed · since 14 Sep 2026 · CVE-2026-73496

    AI
  21. closed8.8
    Langflow CVE-2026-84889: IBM Langflow OSS arbitrary code execution via path traversal

    Patch now · Disclosed · since 10 Sep 2026 · CVE-2026-84889

    AI
  22. closed6.5
    Langflow IBM Langflow OSS vulnerable to unauthorized file access

    Patch now · Disclosed · since 10 Sep 2026 · CVE-2026-9225

    AI
  23. closed6.5
    Langflow CVE-2026-17622: IBM Langflow OSS information disclosure via path traversal

    Patch now · Disclosed · since 4 Sep 2026 · CVE-2026-17622

    AI
  24. closed8.1
    Langflow CVE-2026-19303: IBM Langflow OSS arbitrary local file deletion vulnerability

    Patch now · Disclosed · since 4 Sep 2026 · CVE-2026-19303

    AI
  25. closed5.4
    Langflow CVE-2026-17621: IBM Langflow OSS remote directory traversal vulnerability

    Patch now · Disclosed · since 4 Sep 2026 · CVE-2026-17621

    AI
  26. closed6.5
    Langflow CVE-2026-14470: IBM Langflow OSS directory traversal vulnerability

    Patch now · Disclosed · since 4 Sep 2026 · CVE-2026-14470

    AI
  27. closed7.7
    Langflow CVE-2026-19306: IBM Langflow OSS arbitrary file read and data exfiltration

    Patch now · Disclosed · since 4 Sep 2026 · CVE-2026-19306

    AI
  28. closed6.5
    Langflow CVE-2026-9138: IBM Langflow OSS arbitrary file write vulnerability

    Patch now · Disclosed · since 4 Sep 2026 · CVE-2026-9138

    AI
  29. closed6.9
    Browser Use CVE-2026-82637: browser-use web-ui path validation vulnerability

    Patch now · Disclosed · since 30 Aug 2026 · CVE-2026-82637

    AI
  30. closed7.5
    Langflow CVE-2026-18899: IBM Langflow OSS path traversal vulnerability

    Patch now · Disclosed · since 28 Aug 2026 · CVE-2026-18899

    AI
  31. closed8.7
    Qwen-Agent Path Traversal Vulnerability in Qwen-Agent Document Parser

    Patch now · Disclosed · since 28 Aug 2026 · CVE-2026-82275

    AI
  32. closed6.8
    Hugging Face libraries CVE-2026-75104: Hugging Face Transformers vulnerable to arbitrary file read

    Patch now · Disclosed · since 17 Aug 2026 · CVE-2026-75104

    AI
  33. closed7.1
    neuro-cortex-memory CVE-2026-49986: Cortex MCP Server vulnerability allows improper developer root validation

    Patch now · Disclosed · since 14 Aug 2026 · CVE-2026-49986

    AI
  34. closed7.7
    MCP servers & tools CVE-2026-73498: Path traversal flaw in MCP Atlassian server allows arbitrary file read

    Patch now · Disclosed · since 12 Aug 2026 · CVE-2026-73498

    AI
  35. closed6.5
    Langflow CVE-2026-7646: Arbitrary file read vulnerability in IBM Langflow OSS

    Patch now · Disclosed · since 5 Aug 2026 · CVE-2026-7646

    AI
  36. closed6.5
    Langflow CVE-2026-7658: IBM Langflow OSS Username Path Traversal Vulnerability

    Patch now · Disclosed · since 5 Aug 2026 · CVE-2026-7658

    AI
  37. closed7.7
    Langflow CVE-2026-8183: IBM Langflow OSS Directory Traversal Vulnerability

    Patch now · Disclosed · since 5 Aug 2026 · CVE-2026-8183

    AI
  38. closed5.4
    Langflow CVE-2026-7869: IBM Langflow OSS Path Traversal in Knowledge Bases API

    Patch now · Disclosed · since 5 Aug 2026 · CVE-2026-7869

    AI
  39. closed7.4
    Langflow CVE-2026-8470: IBM Langflow OSS Weak Cryptographic Key Generation

    Patch now · Disclosed · since 5 Aug 2026 · CVE-2026-8470

    AI
  40. closed7.1
    Hugging Face libraries Hugging Face Transformers save_pretrained allows arbitrary file writes

    Patch now · Disclosed · since 2 Aug 2026 · CVE-2026-9856

    AI
  41. closed7.5
    ComfyUI + custom nodes CVE-2026-56673: ComfyUI Path Traversal and File Exfiltration Flaw

    Patch now · Disclosed · since 31 Jul 2026 · CVE-2026-56673

    AI
  42. closed7.5
    ComfyUI + custom nodes CVE-2026-56671: ComfyUI Path Traversal Vulnerability in Model Preview

    Patch now · Disclosed · since 31 Jul 2026 · CVE-2026-56671

    AI
  43. closed7.5
    Langflow CVE-2026-12942: IBM Langflow OSS Directory Traversal Vulnerability

    Patch now · Disclosed · since 30 Jul 2026 · CVE-2026-12942

    AI
  44. closed6.6
    MCP servers & tools CVE-2026-44192: Path Traversal Flaw in Ansible Lightspeed MCP Server

    Patch now · Disclosed · since 22 Jul 2026 · CVE-2026-44192

    AI
  45. closed8.1
    Langflow CVE-2026-13445: IBM Langflow OSS storage boundary violation in SaveToFile component

    Patch now · Disclosed · since 17 Jul 2026 · CVE-2026-13445

    AI
  46. closed9.9
    Langflow CVE-2026-8859: IBM Langflow OSS path traversal allows arbitrary file write

    Patch now · Disclosed · since 17 Jul 2026 · CVE-2026-8859

    AI
  47. closed7.7
    Open WebUI CVE-2026-59221: Open WebUI terminal proxy path traversal guard bypass

    Patch now · Disclosed · since 24 Jul 2026 · updated 24 Jul 2026 · CVE-2026-59221

    AI
  48. closed6.5
    Flowise Path Traversal in Flowise Vector Store Implementations

    Patch now · Disclosed · since 8 Jul 2026 · CVE-2026-56273

    AI
  49. closed6.1
    LiteLLM CVE-2026-59820: LiteLLM Arbitrary File Write via Skills Archive

    Patch now · Disclosed · since 22 Jul 2026 · updated 22 Jul 2026 · CVE-2026-59820

    AI
  50. closed8.7
    Gradio Gradio FileExplorer Path Traversal Vulnerability CVE-2026-49119

    Patch now · Disclosed · since 1 Jul 2026 · CVE-2026-49119

    AI
  51. closed10.0
    Flowise Flowise Path Traversal File Overwrite Vulnerability CVE-2025-71338

    Patch now · Disclosed · since 25 Jun 2026 · CVE-2025-71338

    AI
  52. closed9.8
    Flowise Flowise Arbitrary File Upload Vulnerability CVE-2025-71333

    Patch now · Disclosed · No patch yet · since 25 Jun 2026 · updated 26 Jun 2026 · CVE-2025-71333

    AI
  53. closed8.7
    Flowise CVE-2025-71324: Arbitrary file read vulnerability in Flowise

    Patch now · Disclosed · since 25 Jun 2026 · CVE-2025-71324

    AI
  54. closed9.8
    Flowise CVE-2025-71334: Arbitrary file access vulnerability in Flowise

    Patch now · Disclosed · Patched · since 25 Jun 2026 · updated 26 Jun 2026 · CVE-2025-71334

    AI
  55. closed4.3
    AnythingLLM CVE-2026-48789: AnythingLLM path traversal vulnerability on Windows

    Patch now · Disclosed · since 24 Jun 2026 · CVE-2026-48789

    AI
  56. closed6.3
    Flowise CVE-2026-12821: Path traversal vulnerability in Flowise S3 loader

    Patch now · Disclosed · since 22 Jun 2026 · CVE-2026-12821

    AI
  57. closed7.7
    Open WebUI CVE-2026-54017: Open WebUI terminal server proxy path traversal and SSRF

    Patch now · Disclosed · since 17 Jun 2026 · updated 18 Jun 2026 · CVE-2026-54017

    AI
  58. closed4.3
    Open WebUI CVE-2026-54014: Open WebUI sibling-prefix path traversal in cache endpoint

    Patch now · Disclosed · since 17 Jun 2026 · updated 23 Jun 2026 · CVE-2026-54014

    AI
  59. closed5.1
    LangChain family CVE-2026-55443: LangChain: Path traversal and sandbox escape in file loaders

    Patch now · Disclosed · since 16 Jun 2026 · updated 22 Jun 2026 · CVE-2026-55443

    AI
  60. closed6.5
    Langflow CVE-2026-42867: Langflow path traversal in Knowledge Bases API

    Patch now · Disclosed · since 16 Jun 2026 · updated 23 Jun 2026 · CVE-2026-42867

    AI
  61. closed8.4
    GitHub Copilot CVE-2026-45482: Path Traversal Vulnerability in GitHub Copilot and VS Code

    Patch now · Disclosed · since 9 Jun 2026 · CVE-2026-45482

    AI
  62. closed8.8
    F5-TTS F5-TTS Path Traversal Vulnerability in Gradio Handlers

    Patch now · Disclosed · since 1 Jun 2026 · CVE-2026-43624

    AI
  63. closed2.5
    AnythingLLM CVE-2026-45403: File copy traversal vulnerability in AnythingLLM

    Patch now · Disclosed · since 28 May 2026 · CVE-2026-45403

    AI
  64. closed9.2
    Dify CVE-2026-41948: Dify path traversal in Plugin Daemon REST API

    Patch now · Disclosed · since 18 May 2026 · CVE-2026-41948

    AI
  65. closed7.3
    Bert-VITS2 CVE-2026-8756: Path traversal vulnerability in fishaudio Bert-VITS2 webui

    Patch now · Disclosed · since 17 May 2026 · CVE-2026-8756

    AI
  66. closed8.1
    Open WebUI CVE-2026-44565: Open WebUI Arbitrary File Write, Delete via Path Traversal

    Patch now · Disclosed · since 11 May 2026 · updated 15 May 2026 · CVE-2026-44565

    AI
  67. closed7.3
    Open WebUI CVE-2026-44566: Open WebUI arbitrary file upload and path traversal

    Patch now · Disclosed · since 8 May 2026 · updated 15 May 2026 · CVE-2026-44566

    AI
  68. closed9.6
    Langflow CVE-2026-42048: Langflow knowledge bases API vulnerable to path traversal

    Patch now · Disclosed · since 5 May 2026 · updated 12 May 2026 · CVE-2026-42048

    AI
  69. closed6.5
    Langflow CVE-2026-3345: IBM Langflow Desktop Remote Directory Traversal

    Patch now · Disclosed · since 30 Apr 2026 · CVE-2026-3345

    AI
  70. closed6.5
    Langflow CVE-2026-4502: IBM Langflow Desktop Directory Traversal Vulnerability

    Patch now · Disclosed · since 30 Apr 2026 · CVE-2026-4502

    AI
  71. closed9.8
    Ollama CVE-2026-42249: Ollama for Windows update mechanism remote code execution

    Patch now · Disclosed · since 29 Apr 2026 · CVE-2026-42249

    AI
  72. closed5.6
    Ollama CVE-2026-7020: Ollama Path Traversal Vulnerability

    Patch now · Disclosed · since 26 Apr 2026 · CVE-2026-7020

    AI
  73. closed9.4
    MCP servers & tools CVE-2026-40576: Path traversal in excel-mcp-server

    Patch now · Disclosed · since 21 Apr 2026 · CVE-2026-40576

    AI
  74. closed4.3
    ComfyUI + custom nodes CVE-2026-6590: Path traversal in ComfyUI model preview endpoint

    Patch now · Disclosed · since 20 Apr 2026 · CVE-2026-6590

    AI
  75. closed4.3
    ComfyUI + custom nodes CVE-2026-6591: Path traversal vulnerability in ComfyUI LoadImage node

    Patch now · Disclosed · since 20 Apr 2026 · CVE-2026-6591

    AI
  76. closed
    Flowise Flowise Vector Store Path Traversal Vulnerability

    Patch now · Disclosed · since 16 Apr 2026

    AI
  77. closed7.5
    text-generation-webui CVE-2026-35485: Path traversal vulnerability in text-generation-webui

    Patch now · Disclosed · since 7 Apr 2026 · CVE-2026-35485

    AI
  78. closed10.0
    FastMCP CVE-2026-32871: FastMCP OpenAPI Provider SSRF and Path Traversal

    Patch now · Disclosed · since 31 Mar 2026 · CVE-2026-32871

    AI
  79. closed4.3
    Open WebUI CVE-2026-28786: Open WebUI vulnerable to path traversal in audio endpoint

    Patch now · Disclosed · since 27 Mar 2026 · CVE-2026-28786

    AI
  80. closed7.5
    LangChain family CVE-2026-34070: LangChain Core Has Path Traversal Vulnerabilities in load_prompt

    Patch now · Disclosed · since 27 Mar 2026 · updated 31 Mar 2026 · CVE-2026-34070

    AI
  81. closed8.7
    Langflow Langflow profile picture endpoint path traversal vulnerability

    Patch now · Disclosed · since 20 Mar 2026 · updated 24 Mar 2026 · CVE-2026-33497

    AI
  82. closed6.4
    AnythingLLM CVE-2026-32719: AnythingLLM Zip Slip Path Traversal Vulnerability

    Patch now · Disclosed · since 16 Mar 2026 · CVE-2026-32719

    AI
  83. closed9.0
    MCP servers & tools MCP Atlassian directory traversal vulnerability allows arbitrary file write

    Patch now · Disclosed · since 10 Mar 2026 · CVE-2026-27825

    AI
  84. closed7.5
    Gradio CVE-2026-28414: Gradio Path Traversal Vulnerability on Windows

    Patch now · Disclosed · since 1 Mar 2026 · updated 1 Mar 2026 · CVE-2026-28414

    AI
  85. closed6.4
    MCP servers & tools CVE-2026-27735: Path traversal vulnerability in Model Context Protocol git server

    Patch now · Disclosed · since 26 Feb 2026 · CVE-2026-27735

    AI
  86. closed7.2
    AnythingLLM CVE-2026-24478: AnythingLLM Path Traversal Leading to RCE

    Patch now · Disclosed · since 27 Jan 2026 · CVE-2026-24478

    AI
  87. closed9.8
    Windsurf CVE-2025-62353: Path traversal vulnerability in Windsurf IDE

    Patch now · Disclosed · since 17 Oct 2025 · CVE-2025-62353

    AI
  88. closed
    Flowise Flowise vulnerable to arbitrary file exposure

    Patch now · Disclosed · since 10 Oct 2025

    AI
  89. closed
    Flowise Flowise arbitrary file access via missing chat flow id validation

    Patch now · Disclosed · since 15 Sep 2025

    AI
  90. closed7.7
    Claude Code + SDKs CVE-2025-54794: Claude Code Path Restriction Bypass Vulnerability

    Patch now · Disclosed · since 4 Aug 2025 · updated 5 Aug 2025 · CVE-2025-54794

    AI
  91. closed7.5
    LlamaIndex CVE-2025-6209: LlamaIndex path traversal vulnerability in encode_image

    Patch now · Disclosed · since 7 Jul 2025 · CVE-2025-6209

    AI
  92. closed7.3
    MCP servers & tools CVE-2025-53110: Model Context Protocol filesystem server path validation bypass

    Patch now · Disclosed · since 1 Jul 2025 · updated 2 Jul 2025 · CVE-2025-53110

    AI
  93. closed5.5
    Langchain-Chatchat CVE-2025-6855: Path traversal vulnerability found in Langchain-Chatchat

    Patch now · Disclosed · since 29 Jun 2025 · CVE-2025-6855

    AI
  94. closed4.3
    Langchain-Chatchat CVE-2025-6854: Langchain-Chatchat Assistant Files Path Traversal

    Patch now · Disclosed · since 29 Jun 2025 · CVE-2025-6854

    AI
  95. closed6.3
    Langchain-Chatchat CVE-2025-6853: Langchain-Chatchat Path Traversal Vulnerability

    Patch now · Disclosed · since 29 Jun 2025 · CVE-2025-6853

    AI
  96. closed7.6
    NVIDIA NeMo CVE-2025-23250: Path Traversal Vulnerability in NVIDIA NeMo Framework

    Patch now · Disclosed · since 22 Apr 2025 · CVE-2025-23250

    AI
  97. closed8.2
    Gradio CVE-2024-10648: Gradio Vulnerable to Arbitrary File Deletion

    Patch now · Disclosed · since 20 Mar 2025 · CVE-2024-10648

    AI
  98. closed5.3
    Gradio CVE-2024-12217: Gradio Path Traversal via NTFS Alternate Data Streams

    Patch now · Disclosed · since 20 Mar 2025 · CVE-2024-12217

    AI
  99. closed8.1
    Open WebUI CVE-2024-7043: Open WebUI Arbitrary File Access and Deletion Vulnerability

    Patch now · Disclosed · since 20 Mar 2025 · CVE-2024-7043

    AI
  100. closed7.1
    NVIDIA NeMo CVE-2025-23360: NVIDIA Nemo Framework path traversal vulnerability

    Patch now · Disclosed · since 11 Mar 2025 · CVE-2025-23360

    AI
  101. closed9.2
    ComfyUI + custom nodes CVE-2024-21575: Path traversal vulnerability in ComfyUI-Impact-Pack

    Patch now · Disclosed · since 12 Dec 2024 · CVE-2024-21575

    AI
  102. closed7.5
    Ollama CVE-2024-39722: Ollama path traversal exposes server files in api/push route

    Patch now · Disclosed · since 31 Oct 2024 · CVE-2024-39722

    AI
  103. closed6.9
    LangChain family CVE-2024-7774: LangChain Path Traversal Vulnerability

    Patch now · Disclosed · since 29 Oct 2024 · CVE-2024-7774

    AI
  104. closed6.3
    NVIDIA NeMo CVE-2024-0129: NVIDIA NeMo path traversal vulnerability

    Patch now · Disclosed · since 15 Oct 2024 · CVE-2024-0129

    AI
  105. closed6.9
    LoLLMs CVE-2024-6985: LoLLMs path traversal in open_personality_folder endpoint

    Patch now · Disclosed · since 11 Oct 2024 · CVE-2024-6985

    AI
  106. closed3.4
    LoLLMs CVE-2024-6971: LoLLMs Server path traversal vulnerability

    Patch now · Disclosed · since 11 Oct 2024 · CVE-2024-6971

    AI
  107. closed6.9
    Gradio CVE-2024-47164: Gradio directory traversal vulnerability

    Patch now · Disclosed · since 10 Oct 2024 · CVE-2024-47164

    AI
  108. closed6.9
    Gradio CVE-2024-47166: Gradio path traversal in custom component endpoint

    Patch now · Disclosed · since 10 Oct 2024 · CVE-2024-47166

    AI
  109. closed8.7
    Ollama CVE-2024-45436: Ollama zip extraction directory traversal vulnerability

    Patch now · Disclosed · since 29 Aug 2024 · CVE-2024-45436

    AI
  110. closed7.3
    LoLLMs CVE-2024-6281: LoLLMS path traversal vulnerability in settings

    Patch now · Disclosed · since 20 Jul 2024 · CVE-2024-6281

    AI
  111. closed7.4
    LoLLMs CVE-2024-5824: lollms path traversal allows config override and RCE

    Patch now · Disclosed · since 27 Jun 2024 · CVE-2024-5824

    AI
  112. closed7.3
    LoLLMs CVE-2024-6139: lollms path traversal vulnerability in XTTS server

    Patch now · Disclosed · since 27 Jun 2024 · CVE-2024-6139

    AI
  113. closed8.6
    LoLLMs CVE-2024-6085: Path traversal vulnerability in lollms

    Patch now · Disclosed · since 27 Jun 2024 · CVE-2024-6085

    AI
  114. closed9.8
    LoLLMs CVE-2024-5443: Lollms path traversal remote code execution

    Patch now · Disclosed · since 22 Jun 2024 · CVE-2024-5443

    AI
  115. closed7.5
    LoLLMs CVE-2024-2548: Path Traversal Vulnerability in Lollms Web UI

    Patch now · Disclosed · since 6 Jun 2024 · CVE-2024-2548

    AI
  116. closed9.8
    ChuanhuChatGPT CVE-2024-3234: Path Traversal Vulnerability in ChuanhuChatGPT

    Patch now · Disclosed · since 6 Jun 2024 · CVE-2024-3234

    AI
  117. closed9.8
    LoLLMs CVE-2024-3429: Path Traversal Vulnerability in LoLLMS

    Patch now · Disclosed · since 6 Jun 2024 · CVE-2024-3429

    AI
  118. closed7.7
    LoLLMs CVE-2024-4881: Path Traversal Vulnerability in LoLLMS

    Patch now · Disclosed · since 6 Jun 2024 · CVE-2024-4881

    AI
  119. closed7.5
    Gradio CVE-2024-4941: Local file inclusion in Gradio JSON component

    Patch now · Disclosed · since 6 Jun 2024 · CVE-2024-4941

    AI
  120. closed4.0
    LoLLMs CVE-2024-4330: Path traversal in parisneo/lollms-webui

    Patch now · Disclosed · since 2 Jun 2024 · CVE-2024-4330

    AI
  121. closed8.8
    Ollama CVE-2024-37032: Ollama digest format validation flaw

    Patch now · Disclosed · since 31 May 2024 · CVE-2024-37032

    AI
  122. closed6.5
    LangChain family CVE-2024-3571: langchain vulnerable to path traversal

    Patch now · Disclosed · since 16 Apr 2024 · CVE-2024-3571

    AI
  123. closed7.5
    Gradio CVE-2024-1561: gradio vulnerable to Path Traversal

    Patch now · Disclosed · since 16 Apr 2024 · CVE-2024-1561

    AI
  124. closed9.8
    Qdrant CVE-2024-2221: Qdrant Path Traversal and Arbitrary File Upload

    Patch now · Disclosed · since 10 Apr 2024 · CVE-2024-2221

    AI
  125. closed9.2
    Gradio CVE-2024-1728: Gradio arbitrary file access vulnerability

    Patch now · Disclosed · since 25 Sep 2024 · updated 25 Sep 2024 · CVE-2024-1728

    AI
  126. closed5.5
    Qdrant CVE-2024-3078: Qdrant Full Snapshot REST API Path Traversal

    Patch now · Disclosed · since 29 Mar 2024 · CVE-2024-3078

    AI
  127. closed8.1
    LangChain family CVE-2024-28088: LangChain directory traversal vulnerability

    Patch now · Disclosed · since 4 Mar 2024 · CVE-2024-28088

    AI
  128. closed7.5
    Gradio CVE-2024-0964: Gradio Path Traversal Vulnerability

    Patch now · Disclosed · since 6 Feb 2024 · updated 6 Feb 2024 · CVE-2024-0964

    AI
  129. closed8.6
    Gradio CVE-2023-51449: File traversal and SSRF vulnerability in Gradio

    Patch now · Disclosed · since 21 Dec 2023 · updated 22 Dec 2023 · CVE-2023-51449

    AI
  130. closed4.4
    NVIDIA NeMo CVE-2022-22821: NVIDIA NeMo ASR WebApp Path Traversal

    Patch now · Disclosed · since 10 Jan 2022 · CVE-2022-22821

    AI
  131. closed9.3
    Gradio CVE-2021-43831: Local file access vulnerability in Gradio interface

    Patch now · Disclosed · since 21 Jan 2022 · updated 21 Jan 2022 · CVE-2021-43831

    AI