[GH-ISSUE #1384] [BUG]: Security vulnerability #884

Closed
opened 2026-02-22 18:22:00 -05:00 by yindo · 1 comment
Owner

Originally created by @mnqazi on GitHub (May 13, 2024).
Original GitHub issue: https://github.com/Mintplex-Labs/anything-llm/issues/1384

How are you running AnythingLLM?

Docker (local)

What happened?

I've reported 2 vulnerabilities on huntr.com

Please have a look and validate the same.

  1. https://huntr.com/bounties/f786481c-5837-40ca-b830-6f327a47d9da
  2. https://huntr.com/bounties/8ec14991-ee35-493d-a8d3-21a1cfd57869

Are there known steps to reproduce?

No response

Originally created by @mnqazi on GitHub (May 13, 2024). Original GitHub issue: https://github.com/Mintplex-Labs/anything-llm/issues/1384 ### How are you running AnythingLLM? Docker (local) ### What happened? I've reported 2 vulnerabilities on [huntr.com](http://huntr.com/) Please have a look and validate the same. 1. https://huntr.com/bounties/f786481c-5837-40ca-b830-6f327a47d9da 2. https://huntr.com/bounties/8ec14991-ee35-493d-a8d3-21a1cfd57869 ### Are there known steps to reproduce? _No response_
yindo added the possible bug label 2026-02-22 18:22:00 -05:00
yindo closed this issue 2026-02-22 18:22:00 -05:00
Author
Owner

@timothycarambat commented on GitHub (May 13, 2024):

Please do not make a bug issue for us to just check the Huntr bug bounty. This is considered spam. We check it at least once a month and will be assessed and triaged then. The Huntr team emails us about the reports, so we do not need any other reminder or notification

@timothycarambat commented on GitHub (May 13, 2024): Please **do not** make a bug issue for us to just check the Huntr bug bounty. This is considered spam. We check it at least once a month and will be assessed and triaged then. The Huntr team emails us about the reports, so we do not need any other reminder or notification
yindo changed title from [BUG]: Security vulnerability to [GH-ISSUE #1384] [BUG]: Security vulnerability 2026-06-05 14:37:44 -04:00
Sign in to join this conversation.
1 Participants
Notifications
Due Date
No due date set.
Dependencies

No dependencies set.

Reference: Mintplex-Labs/anything-llm#884