Vulnerabilities > Onyx

DATE CVE VULNERABILITY TITLE RISK
2025-03-20 CVE-2024-7767 Unspecified vulnerability in Onyx 0.3.94
An improper access control vulnerability exists in danswer-ai/danswer version v0.3.94.
network
low complexity
onyx
8.1
2025-03-20 CVE-2024-9612 Unspecified vulnerability in Onyx 0.3.94
In danswer-ai/danswer v0.3.94, administrators can set the visibility of pages within a workspace, including the search page.
network
low complexity
onyx
6.5