Threats tagged 'ghsa-xxxm-jwv4-xmv7'

1 threat

Severity	CVSS	Signals	Threat	Source	Published	Score and star
Medium	6.9	EPSS 0.5%	CVE-2026-90603Anil-matcha Open-Generative-AI · Improper Access Control Medium6.9EPSS 0.5%2026-09-14GCVE DatabaseCVE-2026-90603 A vulnerability was identified in Anil-matcha Open-Generative-AI up to 1.0.11/2.0.0. Affected by this issue is some unknown functionality of the file /api/upload-binary of the component S3 Upload. Such manipulation of the argument x-proxy-target-url leads to unrestricted upload. The attack may be launched remotely. The name of the patch is f013270957f75e439eaf97eb2a93decb32a4543e. Applying a patch is advised to resolve this issue. EPSS 0.5%Report on CVE-2026-90603 Vulnerability CWE-284 #ghsa-xxxm-jwv4-xmv7	GCVE Database	2026-09-14

Page 1 of 1