Mintplexlabs Anythingllm Docker
2 CVEs affecting Mintplexlabs Anythingllm Docker. Latest disclosed: 2025-03-20. Critical: 1, High: 0.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2024-3166 | Critical | 9.6 | 2024-06-06 | A Cross-Site Scripting (XSS) vulnerability exists in mintplex-labs/anything-llm, affecting both the desktop application version 1.2.0 and the latest version of… |
CVE-2024-13060 | Medium | 4.3 | 2025-03-20 | A vulnerability in AnythingLLM Docker version 1.3.1 allows users with 'Default' permission to access other users' profile pictures by changing the 'id' paramet… |