mintplexlabs vulnerabilities

Products

• anythingllm 3
• anything-llm 2

Latest mintplexlabs CVEs

Newest publication first

1. CVE-2023-5833 Improper Access Control in mintplex-labs/anything-llm

   Published 2023-10-30

   High·CVSS 8.1

   Improper Access Control in GitHub repository mintplex-labs/anything-llm prior to 0.1.0.

2. CVE-2023-5832 Improper Input Validation in mintplex-labs/anything-llm

   Published 2023-10-30

   Critical·CVSS 9.1

   Improper Input Validation in GitHub repository mintplex-labs/anything-llm prior to 0.1.0.

3. CVE-2023-4899 SQL Injection in mintplex-labs/anything-llm

   Published 2023-09-11

   High·CVSS 8.1

   SQL Injection in GitHub repository mintplex-labs/anything-llm prior to 0.0.1.

4. CVE-2023-4898 Authentication Bypass by Primary Weakness in mintplex-labs/anything-llm

   Published 2023-09-11

   High·CVSS 8.2

   Authentication Bypass by Primary Weakness in GitHub repository mintplex-labs/anything-llm prior to 0.0.1.

5. CVE-2023-4897 Relative Path Traversal in mintplex-labs/anything-llm

   Published 2023-09-11

   High·CVSS 8.7

   Relative Path Traversal in GitHub repository mintplex-labs/anything-llm prior to 0.0.1.

Sources: CVE.org, NVD, CISA KEV, FIRST EPSS, OSV and public exploit-reference metadata. Product matching comes from the published CVE records. A proof-of-concept means public code exists; it is not evidence of exploitation.