Skip to content
OpenAdvisories

Vendor

stangirard

5 known vulnerabilities.

stangirard at a glance

Last 12 months
0
Critical · all time
0
Exploited · all time
0
Public exploit · all time
0
New vulnerabilities per month · last 12 months
0 1 1 December 2025: 0 vulnerabilities Dec 2025 January 2026: 0 vulnerabilities February 2026: 0 vulnerabilities March 2026: 0 vulnerabilities Mar April 2026: 0 vulnerabilities May 2026: 0 vulnerabilities June 2026: 0 vulnerabilities Jun July 2026: 0 vulnerabilities August 2026: 0 vulnerabilities September 2026: 0 vulnerabilities Sep October 2026: 0 vulnerabilities November 2026: 0 vulnerabilities
Show as table
MonthVulnerabilitiesCritical
Nov 202600
Oct 202600
Sep 202600
Aug 202600
Jul 202600
Jun 202600
May 202600
Apr 202600
Mar 202600
Feb 202600
Jan 202600
Dec 202500
Nov 202500
Oct 202500
Sep 202500
Aug 202500
Jul 202500
Jun 202500
May 202500
Apr 202500
Mar 202520
Feb 202500
Jan 202500
Dec 202400

Products

stangirard/quivr 5
All Critical High Medium Low Exploited only Public exploit

5 results · Feed

  • High 7.5
    CVE-2024-9229

    Denial of Service (DoS) via Multipart Boundary in stangirard/quivr

    A Denial of Service (DoS) vulnerability in the file upload feature of stangirard/quivr v0.0.298 allows unauthenticated attackers to cause excessive resource consumption by appending characters to the end of a multipart boundary in an HTTP request. This leads …

    stangirard stangirard/quivr quivr-core PyPI
  • Medium 4.3
    CVE-2024-6583

    Path Traversal in stangirard/quivr

    A path traversal vulnerability exists in the latest version of stangirard/quivr. This vulnerability allows an attacker to upload files to arbitrary paths in an S3 bucket by manipulating the file path in the upload request.

    stangirard stangirard/quivr
  • Medium 6.8
    CVE-2024-6229

    Stored XSS in stangirard/quivr

    A stored cross-site scripting (XSS) vulnerability exists in the 'Upload Knowledge' feature of stangirard/quivr, affecting the latest version. Users can upload files via URL, which allows the insertion of malicious JavaScript payloads. These payloads are store…

    stangirard stangirard/quivr
  • High 8.6
    CVE-2024-5885

    Server-Side Request Forgery (SSRF) in stangirard/quivr

    stangirard/quivr version 0.0.236 contains a Server-Side Request Forgery (SSRF) vulnerability. The application does not provide sufficient controls when crawling a website, allowing an attacker to access applications on the local network. This vulnerability co…

    stangirard stangirard/quivr
  • High 7.7
    CVE-2024-4851

    SSRF Vulnerability in stangirard/quivr

    A Server-Side Request Forgery (SSRF) vulnerability exists in the stangirard/quivr application, version 0.0.204, which allows attackers to access internal networks. The vulnerability is present in the crawl endpoint where the 'url' parameter can be manipulated…

    stangirard stangirard/quivr