Vulnerability feed

Executive summary

A security vulnerability has been reported in Onyx, an open source AI platform from onyx-dot-app, in versions up to 5.0.0. The advisory text provided is mostly repository page content and does not describe the flaw, its severity, or a vendor fix. Defenders should check the original NVD entry and vendor channels for details and remediation guidance.

Technical summary

The advisory does not state the vulnerability class, attack vector, or preconditions. It names affected versions as up to 5.0.0 but does not state a fixed version, workaround, CVSS score, exploitation status, or detection guidance. The text provided is largely GitHub repository page content describing Onyx features and deployment modes. Teams running Onyx 5.0.0 or earlier should consult the NVD record and the upstream project for the specific flaw details and patched release.

Summaries are generated by AI from the linked advisory text. Confirm versions and fixes at the source.

Summarized from github.com/onyx-dot-app/onyx

Impact if exploited

How it is exploited

Attack vector

Network

Attack complexity

Low

Attack requirements

None

Privileges required

Low

User interaction

Passive

CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:P/VC:N/VI:L/VA:N/SC:N/SI:N/SA:N/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X

Affects

onyx-dot-apponyx-dot-app Onyx