https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Tue, 06 Oct 2026 12:14:40 +0000 https://cve.radiocsirt.org/vuln/euvd-2026-224086 EUVD-2026-224086 https://cve.radiocsirt.org/vuln/euvd-2026-224086 https://cve.radiocsirt.org/vuln/fkie_cve-2024-7819 <p>A CORS misconfiguration in danswer-ai/danswer v1.4.1 allows attackers to steal sensitive information such as chat contents, API keys, and other data. This vulnerability occurs due to improper validation of the origin header, enabling malicious web pages to make unauthorized requests to the application&#39;s API.</p> <p>A CORS misconfiguration in danswer-ai/danswer v1.4.1 allows attackers to steal sensitive information such as chat contents, API keys, and other data. This vulnerability occurs due to improper validation of the origin header, enabling malicious web pages to make unauthorized requests to the application&#39;s API.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2024-7819 https://cve.radiocsirt.org/vuln/ghsa-2c36-wq4v-5v3h <p>A CORS misconfiguration in danswer-ai/danswer v1.4.1 allows attackers to steal sensitive information such as chat contents, API keys, and other data. This vulnerability occurs due to improper validation of the origin header, enabling malicious web pages to make unauthorized requests to the application&#39;s API.</p> <p>A CORS misconfiguration in danswer-ai/danswer v1.4.1 allows attackers to steal sensitive information such as chat contents, API keys, and other data. This vulnerability occurs due to improper validation of the origin header, enabling malicious web pages to make unauthorized requests to the application&#39;s API.</p> https://cve.radiocsirt.org/vuln/ghsa-2c36-wq4v-5v3h