Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
1 selected

2 records

Vendor: truefoundry Clear all filters
TI-2025-20350 CVE-2025-27518

Cognita CORS misconfiguration in backend API server

Priority LOW 31

Cognita is a RAG (Retrieval Augmented Generation) Framework for building modular, open source applications for production by TrueFoundry.

CVSS 4.0MEDIUM 6.9 Network No auth No interaction EPSS 0.00494 Published 2025-03-07 Fixed in 75079c3d3cf376381489b9a82ee46c69024e1a15 CWE-79
TI-2025-20351 CVE-2025-27519

Cognita Arbitrary File Write

Priority MEDIUM 43

Cognita is a RAG (Retrieval Augmented Generation) Framework for building modular, open source applications for production by TrueFoundry.

CVSS 4.0CRITICAL 9.3 Network No auth No interaction EPSS 0.01388 Published 2025-03-07 No fix listed CWE-22