Open Generative Ai
Approved changes feed: RSS · Atom
cpe:2.3:a:anil-matcha:open-generative-ai:*:*:*:*:*:*:*:*
part: a version: * update: *
| Vendor | Anil Matcha (9a42c762-59f7-5c53-870f-29c37a24ce9b) |
|---|---|
| Product | Open Generative Ai (ec82a71e-3b5a-50ff-9377-1ffa615edcad) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | * |
| Target hardware | * |
| Other | * |
| Notes | Imported from gcve-enriched-dumps CVE data |
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
| No PURL mappings for this CPE yet. | ||
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2026-90602 |
vulnerable | 2026-09-16 04:33:05.384049 |
Anil-matcha Open-Generative-AI Studio Components ImageStudio.js renderHistory cross site scripting
LOW (3.5)
A vulnerability was determined in Anil-matcha Open-Generative-AI up to 1.0.11/2.0.0. Affected by this vulnerability is the function renderHistory of the file ImageStudio.js of the component Studio Components. This manipulation causes cross site scripting. The attack may be initiated remotely. The pull request to fix this issue awaits acceptance.
Published: 2026-09-13T22:45:16.659Z
Updated: 2026-09-14T16:57:04.817Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2026-90603 |
vulnerable | 2026-09-16 04:33:05.205209 |
Anil-matcha Open-Generative-AI S3 Upload upload-binary unrestricted upload
HIGH (7.3)
A vulnerability was identified in Anil-matcha Open-Generative-AI up to 1.0.11/2.0.0. Affected by this issue is some unknown functionality of the file /api/upload-binary of the component S3 Upload. Such manipulation of the argument x-proxy-target-url leads to unrestricted upload. The attack may be launched remotely. The name of the patch is f013270957f75e439eaf97eb2a93decb32a4543e. Applying a patch is advised to resolve this issue.
Published: 2026-09-13T23:00:13.818Z
Updated: 2026-09-16T14:20:58.284Z |
Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.