AI and data stack advisories

Severe, 6 weeks1496Projects326

1496 severe, 6 weeks · 326 projects

Packages

LightRAG security advisories

10 advisories · 5 critical or high in 12 months · latest Sep 22

Repository

10 advisories

Medium 6.1Sep 22LightRAG: cross-site scriptingCVE-2026-86062fixed in 1.5.5High 7.1Sep 22LightRAG: server-side request forgeryCVE-2026-85740fixed in 1.5.5Critical 9.1Sep 22lightrag-hku: No Rate Limiting on /login Endpoint Allows Brute-Force AttacksCVE-2026-85734fixed in 1.5.5Medium 5.9Sep 22lightrag-hku: Plaintext Passwords Compared Without Constant-Time FunctionCVE-2026-85725fixed in 1.5.5Medium 5.3Sep 22lightrag-hku: Sensitive Information Exposure Through Raw Exception Messages in API Error ResponsesCVE-2026-85709fixed in 1.5.5CriticalJul 20LightRAG: improper authenticationCVE-2026-61740fixed in 1.5.4Critical 9.3Jul 20LightRAG: CORS Wildcard + Credentials Enables Any-Origin Credentialed RequestsCVE-2026-61736fixed in 1.5.4Medium 4.2Apr 8lightrag-hku: JWT Algorithm Confusion VulnerabilityCVE-2026-39413fixed in 1.4.14High 7.5Apr 4LightRAG: Hardcoded JWT Signing Secret Allows Authentication BypassCVE-2026-30762fixed in 1.4.13Medium 5.3Jun 27, 2025HKUDS LightRAG allows Path Traversal via function upload_to_input_dirCVE-2025-6773fixed in 1.3.8
About LightRAG

[EMNLP2025] LightRAG: Simple and Fast Retrieval-Augmented Generation

Packages watched: lightrag-hku (PyPI).

HKUDS/LightRAGOn Repos