# cve.now: Binary-husky

The newest entries naming Binary-husky as an affected vendor (up to 200), of 26 in all, 0 known exploited. Older ones are in the full catalog at https://cve.now/latest.md.

- [CVE-2025-10236](https://cve.now/CVE-2025-10236.md): binary-husky gpt\_academic LaTeX File latex\_toolbox.py merge\_tex\_files\_ path traversal (CVSS 5.3)
- [CVE-2024-10956](https://cve.now/CVE-2024-10956.md): Cross-Site WebSocket Hijacking in binary-husky/gpt\_academic (CVSS 7.6)
- [CVE-2024-12392](https://cve.now/CVE-2024-12392.md): Server-Side Request Forgery (SSRF) in binary-husky/gpt\_academic (CVSS 6.5)
- [CVE-2024-12387](https://cve.now/CVE-2024-12387.md): Improper Input Validation in binary-husky/gpt\_academic (CVSS 6.5)
- [CVE-2024-11030](https://cve.now/CVE-2024-11030.md): SSRF in binary-husky/gpt\_academic (CVSS 7.7)
- [CVE-2024-10948](https://cve.now/CVE-2024-10948.md): Arbitrary File Read via Upload Function in binary-husky/gpt\_academic (CVSS 6.5)
- [CVE-2024-10986](https://cve.now/CVE-2024-10986.md): Local File Read (LFI) by Tarslip Symlink via arxiv\_download() API in binary-husky/gpt\_academic (CVSS 8.8)
- [CVE-2024-10954](https://cve.now/CVE-2024-10954.md): Prompt Injection Leading to RCE in binary-husky/gpt\_academic Plugin \`manim\` (CVSS 8.8)
- [CVE-2024-12389](https://cve.now/CVE-2024-12389.md): Path Traversal in binary-husky/gpt\_academic (CVSS 8.8)
- [CVE-2024-10950](https://cve.now/CVE-2024-10950.md): Code Injection in binary-husky/gpt\_academic (CVSS 8.8)
- [CVE-2024-12390](https://cve.now/CVE-2024-12390.md): Remote Code Execution in binary-husky/gpt\_academic (CVSS 8.8)
- [CVE-2024-10714](https://cve.now/CVE-2024-10714.md): Denial of Service in binary-husky/gpt\_academic (CVSS 7.5)
- [CVE-2024-12391](https://cve.now/CVE-2024-12391.md): Regular Expression Denial of Service (ReDoS) in binary-husky/gpt\_academic (CVSS 6.5)
- [CVE-2024-11033](https://cve.now/CVE-2024-11033.md): Denial of Service (DoS) in binary-husky/gpt\_academic (CVSS 6.5)
- [CVE-2024-10819](https://cve.now/CVE-2024-10819.md): CSRF to XSS in binary-husky/gpt\_academic (CVSS 7.1)
- [CVE-2025-0183](https://cve.now/CVE-2025-0183.md): Stored XSS in binary-husky/gpt\_academic (CVSS 5.4)
- [CVE-2024-12388](https://cve.now/CVE-2024-12388.md): Regular Expression Denial of Service (ReDoS) in binary-husky/gpt\_academic (CVSS 6.5)
- [CVE-2024-11039](https://cve.now/CVE-2024-11039.md): Deserialization of Untrusted Data in binary-husky/gpt\_academic (CVSS 8.8)
- [CVE-2024-10812](https://cve.now/CVE-2024-10812.md): Open Redirect in binary-husky/gpt\_academic (CVSS 6.1)
- [CVE-2024-11031](https://cve.now/CVE-2024-11031.md): SSRF in binary-husky/gpt\_academic (CVSS 7.7)
- [CVE-2024-11037](https://cve.now/CVE-2024-11037.md): Path Traversal in binary-husky/gpt\_academic (CVSS 6.5)
- [CVE-2025-25185](https://cve.now/CVE-2025-25185.md): GPT Academic allows arbitary file read by tarfile uncompress within softlink (CVSS 7.5)
- [CVE-2024-10101](https://cve.now/CVE-2024-10101.md): Stored XSS in binary-husky/gpt\_academic (CVSS 5.4)
- [CVE-2024-10100](https://cve.now/CVE-2024-10100.md): Path Traversal in binary-husky/gpt\_academic (CVSS 6.5)
- [CVE-2024-31224](https://cve.now/CVE-2024-31224.md): GPT Academic: Pickle deserializing cookies may pose RCE risk (CVSS 9.8)
- [CVE-2023-33979](https://cve.now/CVE-2023-33979.md): gpt\_academic's Configuration File vulnerable to File Information Disclosure (CVSS 6.5)

---

Source: cve.now
Built by [Sazabi](https://www.sazabi.com/?utm_source=cve-now&utm_medium=markdown), AI-native observability and security: automatic issue detection, plain-language log search and live dashboards.
Page: https://cve.now/vendors/binary-husky
Site guide for agents: https://cve.now/llms.txt
Uses NVD data; not endorsed by NVD.