CRITICAL9.1
PYSEC-2024-317
Details
A vulnerability in gaizhenbiao/chuanhuchatgpt version 20240410 allows an attacker to create arbitrary folders at any location on the server, including the root directory (C: dir). This can lead to uncontrolled resource consumption, resulting in resource exhaustion, denial of service (DoS), server unavailability, and potential data loss or corruption.
Are you affected?
Enter the version of the package you're using.
Affected packages
PyPI/chuanhuchatgpt
Introduced in:
0No fixed version published yet for chuanhuchatgpt (pip). Pin to a known-safe version or switch to an alternative.