Skip to content
OpenAdvisories

Product · Anil-matcha

Open-Generative-AI

2 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • High 7.3
    CVE-2026-90603

    Anil-matcha Open-Generative-AI S3 Upload upload-binary unrestricted upload

    A vulnerability was identified in Anil-matcha Open-Generative-AI up to 1.0.11/2.0.0. Affected by this issue is some unknown functionality of the file /api/upload-binary of the component S3 Upload. Such manipulation of the argument x-proxy-target-url leads to …

    Anil-matcha Open-Generative-AI