Advisories · Technology
Cinnamon kotaemon.
Every CVE that names Cinnamon kotaemon among its affected products, newest first. Vendors and products are as the CNA wrote them; check the affected versions on each record.
- CVSS 9.1 CriticalCritical · CVSS 9+
Kotaemon Missing Ownership Check in Conversation Functions
- Cinnamon kotaemon
- Broken access control
- CVSS 9.3 CriticalCritical · CVSS 9+
kotaemon 0.12.0 Unauthenticated Remote Code Execution via Insecure Deserialization
- Cinnamon kotaemon
- Insecure deserialization
- CVSS 6.5 Medium
kotaemon Vulnerable to Path Traversal via Link Upload
- Cinnamon kotaemon
- Path traversal