Archive
1 October 2026
Vulnerabilities first published on this day (UTC), newest first.
164 results · Clear filters · Feed
-
Medium 6.5
infiniflow ragflow 0.24.0 is vulnerable to Incorrect Access Control via run_mindmap. A reachable path accepts a caller-…
-
Medium 6.5
Ragflow 0.24.0 and prior contains improper access control in update_metadata_setting (api/apps/kb_app.py). Depending on…
-
Medium 6.5
infiniflow ragflow 0.24.0 is vulnerable to Incorrect Access Control via /v1/document/get/<doc_id>.
-
Medium 4.3
deeptutor 1.4.0 contains an authorization bypass through a user-controlled object identifier in TurnRuntimeManager.rege…