https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-06T19:19:23.035833+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/euvd-2026-224086 EUVD-2026-224086 2026-10-06T19:19:23.085421+00:00 EUVD-2026-224086 https://cve.radiocsirt.org/vuln/fkie_cve-2024-7819 fkie_cve-2024-7819 2026-10-06T19:19:23.085463+00:00

A CORS misconfiguration in danswer-ai/danswer v1.4.1 allows attackers to steal sensitive information such as chat contents, API keys, and other data. This vulnerability occurs due to improper validation of the origin header, enabling malicious web pages to make unauthorized requests to the application's API.

 https://cve.radiocsirt.org/vuln/ghsa-2c36-wq4v-5v3h GHSA-2c36-wq4v-5v3h 2026-10-06T19:19:23.085499+00:00

A CORS misconfiguration in danswer-ai/danswer v1.4.1 allows attackers to steal sensitive information such as chat contents, API keys, and other data. This vulnerability occurs due to improper validation of the origin header, enabling malicious web pages to make unauthorized requests to the application's API.