Read the docs

stangirard

Records5All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical0CVSS 9.0–10.0
CVSS high3CVSS 7.0–8.9

Exploited now

stangirard records in CISA KEV

No stangirard vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records
Quivr 4 records HIGH

Records

5 records

TI-2024-08565 CVE-2024-9229 · GHSA-m76r-xqqj-mqmv

Denial of Service (DoS) via Multipart Boundary in stangirard/quivr

Priority HIGH 72

A Denial of Service (DoS) vulnerability in the file upload feature of stangirard/quivr v0.0.298 allows unauthenticated attackers to cause excessive resource consumption by appending characters to the end of a multipart b…

CVSS 3.0HIGH 7.5 Network No auth No interaction EPSS 0.00759 Published 2025-03-20 No fix listed CWE-770
TI-2024-04512 CVE-2024-4851 · GHSA-rcfg-x28g-p9m3

SSRF Vulnerability in stangirard/quivr

Priority HIGH 69

A Server-Side Request Forgery (SSRF) vulnerability exists in the stangirard/quivr application, version 0.0.204, which allows attackers to access internal networks.

CVSS 3.1HIGH 7.7 Network Low privileges No interaction EPSS 0.00576 Published 2024-06-06 No fix listed CWE-918
TI-2024-05777 CVE-2024-6229 · GHSA-2xp5-vm5f-w77m

Stored XSS in stangirard/quivr

Priority MEDIUM 58

A stored cross-site scripting (XSS) vulnerability exists in the 'Upload Knowledge' feature of stangirard/quivr, affecting the latest version.

CVSS 3.1MEDIUM 5.4 Network Low privileges User interaction EPSS 0.00341 Published 2024-07-07 No fix listed CWE-79
TI-2024-06105 CVE-2024-6583 · GHSA-332g-rf22-2vcg

Path Traversal in stangirard/quivr

Priority MEDIUM 53

A path traversal vulnerability exists in the latest version of stangirard/quivr.

CVSS 3.0MEDIUM 4.3 Network Low privileges No interaction EPSS 0.00607 Published 2025-03-20 No fix listed CWE-23
Open these records in search →