Goal Reached Thanks to every supporter — we hit 100%!

Goal: 1000 CNY · Raised: 1359 CNY

100%

mintplex-labs — Vulnerabilities & Security Advisories 77

Browse all 77 CVE security advisories affecting mintplex-labs. AI-powered Chinese analysis, POCs, and references for each vulnerability.

Mintplex Labs operates as a software development entity, primarily known for creating blockchain-based applications and smart contract solutions. An analysis of its public vulnerability record reveals 69 assigned CVEs, indicating a significant historical exposure to security flaws. The most prevalent vulnerability classes associated with the organization’s codebase include remote code execution (RCE), cross-site scripting (XSS), and privilege escalation issues. These defects often stem from inadequate input validation and improper access control mechanisms within their web interfaces and backend services. While specific major incidents involving data breaches are not widely documented in public threat intelligence feeds, the high volume of CVEs suggests systemic weaknesses in their software development lifecycle. This pattern highlights the critical need for rigorous static and dynamic analysis in blockchain-related projects to mitigate risks associated with complex smart contract interactions and standard web application vulnerabilities.

CVE ID Title CVSS Severity Published
CVE-2024-3279 Improper Access Control in mintplex-labs/anything-llm — mintplex-labs/anything-llm CWE-306 8.2AI High AI 2024-08-09
CVE-2024-5216 Denial of Service in mintplex-labs/anything-llm — mintplex-labs/anything-llm CWE-400 9.1AI Critical AI 2024-06-25
CVE-2024-5213 Exposure of Sensitive Information in mintplex-labs/anything-llm — mintplex-labs/anything-llm CWE-201 7.5AI High AI 2024-06-20
CVE-2024-5208 Uncontrolled Resource Consumption in mintplex-labs/anything-llm — mintplex-labs/anything-llm CWE-770 6.5AI Medium AI 2024-06-19
CVE-2024-5211 Path Traversal to Arbitrary File Read/Delete/Overwrite, DoS Attack, and Admin Account Takeover in mintplex-labs/anything-llm — mintplex-labs/anything-llm CWE-29 9.8AI Critical AI 2024-06-12
CVE-2024-3150 Privilege Escalation in mintplex-labs/anything-llm — mintplex-labs/anything-llm CWE-755 8.8AI High AI 2024-06-06
CVE-2024-3149 SSRF in mintplex-labs/anything-llm — mintplex-labs/anything-llm CWE-918 8.1AI High AI 2024-06-06
CVE-2024-3153 Uncontrolled Resource Consumption in mintplex-labs/anything-llm — mintplex-labs/anything-llm CWE-400 7.5AI High AI 2024-06-06
CVE-2024-3166 Cross-Site Scripting (XSS) Vulnerability in mintplex-labs/anything-llm — mintplex-labs/anything-llm CWE-79 8.8AI High AI 2024-06-06
CVE-2024-3102 JSON Injection in mintplex-labs/anything-llm — mintplex-labs/anything-llm CWE-307 7.5AI High AI 2024-06-06
CVE-2024-3110 Stored XSS leading to admin account takeover in mintplex-labs/anything-llm — mintplex-labs/anything-llm CWE-79 4.8AI Medium AI 2024-06-06
CVE-2024-3104 Remote Code Execution in mintplex-labs/anything-llm — mintplex-labs/anything-llm CWE-78 10.0AI Critical AI 2024-06-06
CVE-2024-3033 Improper Authorization in mintplex-labs/anything-llm — mintplex-labs/anything-llm CWE-863 8.2AI High AI 2024-06-06
CVE-2024-3152 Privilege Escalation and Local File Inclusion in mintplex-labs/anything-llm — mintplex-labs/anything-llm CWE-918 9.8AI Critical AI 2024-06-06
CVE-2024-4084 SSRF vulnerability in mintplex-labs/anything-llm — mintplex-labs/anything-llm CWE-918 9.1 - 2024-06-05
CVE-2024-4286 Improper Neutralization of Special Elements in mintplex-labs/anything-llm — mintplex-labs/anything-llm CWE-917 6.5 - 2024-05-26
CVE-2024-4287 Improper Input Validation in mintplex-labs/anything-llm — mintplex-labs/anything-llm CWE-20 7.2AI High AI 2024-05-20
CVE-2024-4284 Denial of Service in mintplex-labs/anything-llm — mintplex-labs/anything-llm CWE-400 7.5 - 2024-05-19
CVE-2024-2913 Race Condition Vulnerability in mintplex-labs/anything-llm — mintplex-labs/anything-llm CWE-367 3.7AI Low AI 2024-05-06
CVE-2024-3029 Improper Input Validation in mintplex-labs/anything-llm — mintplex-labs/anything-llm CWE-20 9.8 - 2024-04-16
CVE-2024-3028 Improper Input Validation in mintplex-labs/anything-llm — mintplex-labs/anything-llm CWE-20 9.8 - 2024-04-16
CVE-2024-0549 Relative Path Traversal in mintplex-labs/anything-llm — mintplex-labs/anything-llm CWE-23 8.1 - 2024-04-16
CVE-2024-0404 Mass Assignment Vulnerability in mintplex-labs/anything-llm — mintplex-labs/anything-llm CWE-915 9.8 - 2024-04-16
CVE-2024-3570 Stored XSS leading to Admin Account Takeover in mintplex-labs/anything-llm — mintplex-labs/anything-llm CWE-79 7.6AI High AI 2024-04-10
CVE-2024-3101 Privilege Escalation via Improper Input Validation in mintplex-labs/anything-llm — mintplex-labs/anything-llm CWE-20 9.8AI Critical AI 2024-04-10
CVE-2024-3283 Privilege Escalation via Mass Assignment in mintplex-labs/anything-llm — mintplex-labs/anything-llm CWE-915 7.2AI High AI 2024-04-10
CVE-2024-3569 Denial of Service (DoS) Vulnerability in mintplex-labs/anything-llm — mintplex-labs/anything-llm CWE-400 7.5AI High AI 2024-04-10
CVE-2024-3025 Path Traversal in mintplex-labs/anything-llm — mintplex-labs/anything-llm CWE-23 9.1AI Critical AI 2024-04-10
CVE-2024-0765 Default user role exporting save state of instance — mintplex-labs/anything-llm CWE-200 6.5 - 2024-03-03
CVE-2024-0795 Create user API role not enforced — mintplex-labs/anything-llm CWE-284 9.8 - 2024-03-02

This page lists every published CVE security advisory associated with mintplex-labs. Each entry links to a detailed page with CVSS scoring, CWE classification, affected products and references. AI-generated Chinese analysis is provided for fast triage.