Danswer-ai
10 CVEs tracked since 2025. Since Mar 2025, none of them reached CISA KEV.
Danswer-ai CVEs per month
| Month | CVEs | In CISA KEV |
|---|---|---|
| 2025-03 | 10 | 0 |
| 2025-04 | 4 or fewer | |
| 2025-05 | 4 or fewer | |
| 2025-06 | 4 or fewer | |
| 2025-07 | 5 or fewer | |
| 2025-08 | 4 or fewer | |
| 2025-09 | 4 or fewer | |
| 2025-10 | 4 or fewer | |
| 2025-11 | 4 or fewer | |
| 2025-12 | 5 or fewer | |
| 2026-01 | 5 or fewer | |
| 2026-02 | 5 or fewer | |
| 2026-03 | 7 or fewer | |
| 2026-04 | 6 or fewer | |
| 2026-05 | 7 or fewer | |
| 2026-06 | 7 or fewer | |
| 2026-07 | 7 or fewer | |
| 2026-08 | 8 or fewer | |
| 2026-09 | 9 or fewer | |
| 2026-10 | 3 or fewer |
Products
The products that kept showing up in Danswer-ai's monthly top three, with their CVEs summed over those months.
Latest CVEs
The 11 most recently published vulnerabilities affecting Danswer-ai.
- CVE-2024-7767Improper Access Control in danswer-ai/danswer8.1
- CVE-2024-9612Unauthorized Access in danswer-ai/danswer6.5
- CVE-2024-8057Improper Access Control in danswer-ai/danswer4.3
- CVE-2024-9617IDOR in danswer-ai/danswer6.5
- CVE-2024-7957Arbitrary File Overwrite in danswer-ai/danswer9.1
- CVE-2024-8065CSRF in danswer-ai/danswer8.1
- CVE-2025-0182Denial of Service in danswer-ai/danswer7.5
- CVE-2024-8028Denial of Service in danswer-ai/danswer7.5
- CVE-2024-7819CORS Misconfiguration in danswer-ai/danswer7.4
- CVE-2024-7779ReDoS (Regular Expression Denial of Service) in danswer-ai/danswer7.5
- CVE-2024-32881Unauthorized access to GET/SET of Slack Bot Tokens in Danswer9.8
The record
- Peak rank
- #94 in Mar 2025
- Busiest month shown
- Mar 2025, 10 CVEs
- Months with a KEV entry
- 0 since Mar 2025
- Monthly snapshots
- 1 since 2025