Vulnerabilities
Aggregated CVE / GHSA / KEV / OSV — filter by tag and category.
| ID | Title | |
|---|---|---|
| CVE-2026-32847 |
|
Path Traversal in path-traversal (CVE-2026-32847)
path traversal in path-traversal (CVE-2026-32847). Confidential information can be exposed externally. Exploitable via `GET /{full_path`.
|
| CVE-2026-40515 |
|
Authorization Flaw in hkuds (CVE-2026-40515)
vulnerability in hkuds (CVE-2026-40515). Confidential information can be exposed externally.
|
| CVE-2026-40516 |
|
SSRF (Server-Side Request Forgery) in hkuds (CVE-2026-40516)
SSRF in hkuds (CVE-2026-40516). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-40502 |
|
Vulnerability in hkuds (CVE-2026-40502)
vulnerability in hkuds (CVE-2026-40502). Successful exploitation can lead to full system takeover.
|
| CVE-2026-40503 |
|
Path Traversal in path-traversal (CVE-2026-40503)
path traversal in path-traversal (CVE-2026-40503). Confidential information can be exposed externally.
|
| CVE-2026-39413 |
|
Vulnerability in lightrag-hku (CVE-2026-39413)
vulnerability in lightrag-hku (CVE-2026-39413). Confidential information can be exposed externally. Exploitable via ``validate_token``. Mitigation: upgrade to `1.4.14` or later.
|