What’s Vulnerable › Products

danswer-ai/danswer vulnerabilities

8 known vulnerabilities, 0 confirmed exploited in the wild (CISA KEV), 8 published in the last 12 months.

Check whether your danswer-ai/danswer version is affected

Latest danswer-ai/danswer vulnerabilities

• CVE-2025-0182 — Denial of Service in danswer-ai/danswer (CVSS 7.5)
• CVE-2024-9617 — IDOR in danswer-ai/danswer (CVSS 6.5)
• CVE-2024-8065 — CSRF in danswer-ai/danswer (CVSS 8.1)
• CVE-2024-8057 — Improper Access Control in danswer-ai/danswer (CVSS 4.3)
• CVE-2024-8028 — Denial of Service in danswer-ai/danswer (CVSS 7.5)
• CVE-2024-7957 — Arbitrary File Overwrite in danswer-ai/danswer (CVSS 9.1)
• CVE-2024-7819 — CORS Misconfiguration in danswer-ai/danswer (CVSS 7.4)
• CVE-2024-7779 — ReDoS (Regular Expression Denial of Service) in danswer-ai/danswer (CVSS 7.5)