Skip to content
OpenAdvisories

Archive

1 October 2026

Vulnerabilities first published on this day (UTC), newest first.

164 results · Clear filters · Feed

  • Medium 6.5

    infiniflow ragflow 0.24.0 is vulnerable to Incorrect Access Control via run_mindmap. A reachable path accepts a caller-…

  • Medium 6.5

    Ragflow 0.24.0 and prior contains improper access control in update_metadata_setting (api/apps/kb_app.py). Depending on…

  • Medium 6.5

    infiniflow ragflow 0.24.0 is vulnerable to Incorrect Access Control via /v1/document/get/<doc_id>.

  • Medium 4.3

    deeptutor 1.4.0 contains an authorization bypass through a user-controlled object identifier in TurnRuntimeManager.rege…