Stangirard vulnerabilities
We track 3 vulnerabilities in Stangirard products across 2 products. 3 are rated high or critical, and none are known to be exploited. The most recent was published on March 20, 2025.
Latest Stangirard vulnerabilities
- 7.5 High severity
stangirard/quivr: Allocation of Resources Without Limits or Throttling
A Denial of Service (DoS) vulnerability in the file upload feature of stangirard/quivr v0.0.298 allows unauthenticated attackers to cause excessive resource consumption by appending characters to the end of a multipart boundary in an HTTP request. This leads t
- 8.6 High severity
stangirard/quivr: Server-Side Request Forgery
stangirard/quivr version 0.0.236 contains a Server-Side Request Forgery (SSRF) vulnerability. The application does not provide sufficient controls when crawling a website, allowing an attacker to access applications on the local network. This vulnerability cou
- 7.7 High severity
stangirard/quivr: Server-Side Request Forgery
A Server-Side Request Forgery (SSRF) vulnerability exists in the stangirard/quivr application, version 0.0.204, which allows attackers to access internal networks. The vulnerability is present in the crawl endpoint where the 'url' parameter can be manipulated