Default01

**Name of the Vulnerable Software and Affected Versions** embedded-graphics versions prior to 0.8.3 **Description** An integer overflow can occur when manipulating the `width` argument within the `ImageRaw::draw sub image()` function located in the src/image/image raw.rs file. This issue allows for a remote attack. **Recommendations** At the moment, there is no information about a newer version that contains a fix for this vulnerability. As a temporary workaround, restrict the use of the `ImageRaw::draw sub image()` function to minimize the risk of exploitation.

**Name of the Vulnerable Software and Affected Versions** embedded-graphics versions prior to 0.8.3 **Description** An integer overflow occurs in the `ImageRaw::new/bytes per row` function within the `src/image/image raw.rs` file when running on 32-bit systems. This issue allows for remote exploitation. **Recommendations** Update to a version newer than 0.8.2. As a temporary mitigation, restrict the use of the `ImageRaw::new/bytes per row` function.

**Name of the Vulnerable Software and Affected Versions** getzep graphiti versions prior to 0.30.2 **Description** An issue in the REST API component, specifically within the `server/graph service/main.py` file, allows for improper authentication. This flaw can be exploited remotely to bypass authentication mechanisms. **Recommendations** At the moment, there is no information about a newer version that contains a fix for this vulnerability.

**Name of the Vulnerable Software and Affected Versions** Anil-matcha Open-Generative-AI versions 1.0.11 and 2.0.0 **Description** A remote cross site scripting issue exists within the Studio Components component. The flaw is located in the `renderHistory()` function of the ImageStudio.js file, allowing an attacker to execute malicious scripts remotely. **Recommendations** At the moment, there is no information about a newer version that contains a fix for this vulnerability. As a temporary workaround, consider restricting the use of the `renderHistory()` function in ImageStudio.js to minimize the risk of exploitation.