Skip to main content
cve.nowby Sazabi
← PyPI
PyPIPackage

dbgpt

8 known vulnerabilities (5 critical, 3 high), with the versions each affects and the releases that fix them.

Latest release
Not known: cve.now hasn't read this package's releases
Newest unaffected release
Not known without release data
Advisories
8 · 5 critical, 3 high
Registry
PyPI

Advisories 8

  • Path Traversal in eosphoros-ai/db-gpt

    Affected: through 0.6.0.

  • CVE-2024-10833Critical 9.1

    Arbitrary File Write in eosphoros-ai/db-gpt

    Affected: fixed in 0.6.2.

  • Cross-Site Request Forgery (CSRF) in eosphoros-ai/db-gpt

    Affected: through 0.6.0.

  • Denial of Service (DoS) via Multipart Boundary in eosphoros-ai/db-gpt

    Affected: through 0.6.0.

  • CVE-2024-10901Critical 9.1

    Arbitrary File Write via DuckDB SQL Injection in eosphoros-ai/db-gpt

    Affected: through 0.6.3.

  • CVE-2024-10835Critical 9.1

    Arbitrary File Write via SQL Injection in eosphoros-ai/db-gpt

    Affected: fixed in 0.7.1.

  • CVE-2024-10902Critical 9.1

    Arbitrary File Upload with Path Traversal in eosphoros-ai/db-gpt

    Affected: through 0.6.0.

  • CVE-2024-10831Critical 9.1

    Arbitrary File Write through Absolute Path Traversal in eosphoros-ai/db-gpt

    Affected: through 0.6.0.