https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-14T15:02:47.956197+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/bdu:2025-02394 bdu:2025-02394 2026-10-14T15:02:47.958743+00:00 bdu:2025-02394 https://cve.radiocsirt.org/vuln/euvd-2026-254987 EUVD-2026-254987 2026-10-14T15:02:47.958772+00:00 EUVD-2026-254987 https://cve.radiocsirt.org/vuln/fkie_cve-2024-13060 fkie_cve-2024-13060 2026-10-14T15:02:47.958786+00:00

A vulnerability in AnythingLLM Docker version 1.3.1 allows users with 'Default' permission to access other users' profile pictures by changing the 'id' parameter in the user cookie. This issue is present in versions prior to 1.3.1.

 https://cve.radiocsirt.org/vuln/ghsa-mjvp-pg3h-wh59 GHSA-mjvp-pg3h-wh59 2026-10-14T15:02:47.958813+00:00

A vulnerability in AnythingLLM Docker version 1.3.1 allows users with 'Default' permission to access other users' profile pictures by changing the 'id' parameter in the user cookie. This issue is present in versions prior to 1.3.1.