HIGH7.1PyPI
GHSA-3248-f932-c76p· CVE-2024-10906, PYSEC-2026-1289DB-GPT vulnerable to Cross-Site Request Forgery
Modified: 7/7/2026
package
PyPI/dbgpt
pkg:pypi/dbgpt
CRITICAL9.1PyPI
GHSA-3xq5-x4fj-rff7· CVE-2024-10902, PYSEC-2026-321DB-GPT vulnerable to Arbitrary File Upload with Path Traversal
Modified: 6/29/2026
HIGH7.5PyPI
GHSA-6xgj-c5fx-5v57· CVE-2024-10829, PYSEC-2026-1290DB-GPT Uncontrolled Resource Consumption vulnerability
Modified: 7/7/2026
CRITICAL9.1PyPI
GHSA-7gj6-22m4-qfhx· CVE-2024-10901, PYSEC-2026-322DB-GPT Arbitrary File Write vulnerability
Modified: 6/29/2026
HIGH8.2PyPI
GHSA-8pwp-phcg-h36g· CVE-2024-10830, PYSEC-2026-1291DB-GPT Path Traversal vulnerability
Modified: 7/7/2026
CRITICAL9.1PyPI
GHSA-hhw5-29f6-hf4x· CVE-2024-10831, PYSEC-2026-323DB-GPT Absolute Path Traversal vulnerability
Modified: 6/29/2026
CRITICAL9.1PyPI
GHSA-j9g7-mqhh-9hxf· CVE-2024-10833, PYSEC-2026-324DB-GPT Absolute Path Traversal in knowledge/{space_name}/document/upload
Modified: 6/29/2026
CRITICAL9.1PyPI
GHSA-qccg-9m4q-xfm6· CVE-2024-10835, PYSEC-2026-325DB-GPT is vulnerable to SQL Injection attacks from unauthenticated users
Modified: 6/29/2026
HIGH7.1PyPI
PYSEC-2026-1289· CVE-2024-10906, GHSA-3248-f932-c76pDB-GPT vulnerable to Cross-Site Request Forgery
Modified: 7/7/2026
HIGH7.5PyPI
PYSEC-2026-1290· CVE-2024-10829, GHSA-6xgj-c5fx-5v57DB-GPT Uncontrolled Resource Consumption vulnerability
Modified: 7/7/2026
HIGH8.2PyPI
PYSEC-2026-1291· CVE-2024-10830, GHSA-8pwp-phcg-h36gDB-GPT Path Traversal vulnerability
Modified: 7/7/2026
CRITICAL9.1PyPI
PYSEC-2026-321· CVE-2024-10902, GHSA-3xq5-x4fj-rff7DB-GPT vulnerable to Arbitrary File Upload with Path Traversal
Modified: 7/1/2026
CRITICAL9.1PyPI
PYSEC-2026-322· CVE-2024-10901, GHSA-7gj6-22m4-qfhxDB-GPT Arbitrary File Write vulnerability
Modified: 7/1/2026
CRITICAL9.1PyPI
PYSEC-2026-323· CVE-2024-10831, GHSA-hhw5-29f6-hf4xDB-GPT Absolute Path Traversal vulnerability
Modified: 7/1/2026
CRITICAL9.1PyPI
PYSEC-2026-324· CVE-2024-10833, GHSA-j9g7-mqhh-9hxfDB-GPT Absolute Path Traversal in knowledge/{space_name}/document/upload
Modified: 7/1/2026
CRITICAL9.1PyPI
PYSEC-2026-325· CVE-2024-10835, GHSA-qccg-9m4q-xfm6DB-GPT is vulnerable to SQL Injection attacks from unauthenticated users
Modified: 7/1/2026