Dem000000

**Name of the Vulnerable Software and Affected Versions** 666ghj BettaFish versions prior to 1.2.2 **Description** A remote attack is possible in the InsightEngine search-result Deduplication component due to an issue in the ` deduplicate results()` function within the `InsightEngine/agent.py` file. This flaw allows for partial string comparison when a manipulation is executed. **Recommendations** As a temporary workaround, restrict the use of the ` deduplicate results()` function until a patch is available.

**Name of the Vulnerable Software and Affected Versions** zcaceres markdownify-mcp versions prior to 1.1.1 **Description** A weakness exists in the `assertPathAllowed()` function within the `src/Markdownify.ts` file. A local attacker can perform a manipulation that leads to symlink following, which occurs when the software follows a symbolic link to access a file or directory outside of the intended path. **Recommendations** Update to a version newer than 1.1.0. As a temporary workaround, restrict local access to the `assertPathAllowed()` function until the fix is officially accepted and released.

**Name of the Vulnerable Software and Affected Versions** RAGapp versions prior to 0.1.6 **Description** A path traversal issue exists in the Knowledge File Handler component. This flaw allows remote attackers to manipulate files via the `FileHandler.upload file()` and `FileHandler.remove file()` functions located in the `src/ragapp/backend/controllers/files.py` file. Path traversal is a technique that allows an attacker to access files and directories that are stored outside the web root folder by manipulating variables that reference files with input that is not properly neutralized. **Recommendations** As a temporary workaround, restrict the use of the `FileHandler.upload file()` and `FileHandler.remove file()` functions until a patch is available.

**Name of the Vulnerable Software and Affected Versions** SimStudioAI sim versions prior to 0.6.93 **Description** An issue exists in the Password Protection Handler component within the `apps/sim/lib/core/security/deployment.ts` library. A remote attacker can perform a manipulation that results in the use of a weak hash, which is a cryptographic function that produces a fixed-size output but is susceptible to collisions or reversals. The attack complexity is high and exploitation is considered difficult. **Recommendations** At the moment, there is no information about a newer version that contains a fix for this vulnerability.

**Name of the Vulnerable Software and Affected Versions** volcengine OpenViking versions prior to 0.3.22 **Description** Insufficient verification of data authenticity exists within the Local VectorDB Primary-key Label Handler component. The issue occurs in the `str to uint64()` function located in the `openviking/storage/vectordb/utils/str to uint64.py` file when processing the `ID` argument. This flaw allows for a remote attack, although the exploitation process is reported as highly complex and difficult. **Recommendations** As a temporary workaround, restrict the use of the `str to uint64()` function until a patch is available. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

**Name of the Vulnerable Software and Affected Versions** Databend versions prior to 1.2.882 **Description** An authorization bypass exists in the HTTP Tenant Handler component. The issue resides in the `ClientSessionManager::state key()` function within the `src/query/service/src/servers/http/v1/session/client session manager.rs` file. This flaw allows a remote attacker to bypass authorization mechanisms. **Recommendations** As a temporary workaround, restrict access to the `ClientSessionManager::state key()` function until a patch is available.

**Name of the Vulnerable Software and Affected Versions** MyScale MyScaleDB versions prior to 1.8.1 **Description** Insufficient verification of data authenticity occurs within the `SegmentId::getCacheKey()` function located in the `src/VectorIndex/Common/SegmentId.h` library. This flaw allows for remote attacks, although they are characterized by high complexity and difficult exploitability. **Recommendations** As a temporary workaround, restrict access to the `SegmentId::getCacheKey()` function until a patch is available. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

**Name of the Vulnerable Software and Affected Versions** VoltAgent versions prior to 2.1.18 **Description** An improper authorization issue exists within the Memory REST API component, specifically in the `handleGetMemoryConversation()` function located in the `packages/server-core/src/handlers/memory.handlers.ts` file. A remote attacker can manipulate the `conversationId` argument to bypass authorization controls. This attack is characterized by high complexity and is considered difficult to exploit. **Recommendations** As a temporary workaround, restrict access to the `handleGetMemoryConversation()` function until a patch is available.

**Name of the Vulnerable Software and Affected Versions** khoj-ai khoj versions prior to 2.0.0-beta.29 **Description** A flaw in the Conversation Sharing Handler component within the file `src/khoj/routers/api chat.py` allows for incorrect authorization. This occurs through the manipulation of the `conversation.agent` argument, enabling remote exploitation. **Recommendations** Update to a version later than 2.0.0-beta.28. As a temporary mitigation, restrict access to the Conversation Sharing Handler component.