AI and data stack advisories

Severe, 6 weeks1496Projects326

1496 severe, 6 weeks · 326 projects

Packages

DB-GPT security advisories

8 advisories · none critical or high in 12 months · latest Mar 20, 2025

Repository

8 advisories

High 7.1Mar 20, 2025DB-GPT vulnerable to Cross-Site Request ForgeryCVE-2024-10906no fix yetCritical 9.1Mar 20, 2025DB-GPT vulnerable to Arbitrary File Upload with Path TraversalCVE-2024-10902no fix yetHigh 7.5Mar 20, 2025DB-GPT Uncontrolled Resource Consumption vulnerabilityCVE-2024-10829no fix yetCritical 9.1Mar 20, 2025DB-GPT Arbitrary File Write vulnerabilityCVE-2024-10901no fix yetHigh 8.2Mar 20, 2025DB-GPT Path Traversal vulnerabilityCVE-2024-10830no fix yetCritical 9.1Mar 20, 2025DB-GPT Absolute Path Traversal vulnerabilityCVE-2024-10831no fix yetCritical 9.1Mar 20, 2025DB-GPT Absolute Path Traversal in knowledge/{space_name}/document/uploadCVE-2024-10833fixed in 0.6.2Critical 9.1Mar 20, 2025DB-GPT is vulnerable to SQL Injection attacks from unauthenticated usersCVE-2024-10835fixed in 0.7.1
About DB-GPT

open-source agentic AI data assistant for the next generation of AI + Data products.

Packages watched: dbgpt (PyPI).

eosphoros-ai/DB-GPTOn Repos