Login Request a demo
DB
Product
Db-gpt
by Dbgpt · last CVE Jul 22, 2025
13
CVEs
0
On KEV
9.8
Max CVSS
0
New 30D
Vulnerabilities13In the news0Timeline
Severity mix
Critical 6High 5Medium 2Low 0
Severity
All severities13Critical6High5Medium2Low0
Exploitation
On CISA KEV0Exploited in the wild0
Watch

Add Db-gpt to your stack to get only the CVEs that touch what you run.

CVECVSSEPSSPublishedSummary · affected versions
CVE-2024-10901
9.8
1%
Mar 20
Arbitrary File Write via DuckDB SQL Injection in eosphoros-ai/db-gpt
Affected: 0.6.0
CVE-2024-10835
9.8
1%
Mar 20
Arbitrary File Write via SQL Injection in eosphoros-ai/db-gpt
Affected: 0.6.0
CVE-2024-10902
9.8
1%
Mar 20
Arbitrary File Upload with Path Traversal in eosphoros-ai/db-gpt
Affected: 0.6.0
CVE-2024-10834
9.1
1%
Mar 20
Arbitrary File Write in eosphoros-ai/db-gpt
Affected: 0.6.0
CVE-2024-10833
9.1
1%
Mar 20
Arbitrary File Write in eosphoros-ai/db-gpt
Affected: 0.6.0
CVE-2024-10831
9.1
1%
Mar 20
Arbitrary File Write through Absolute Path Traversal in eosphoros-ai/db-gpt
Affected: 0.6.0
CVE-2024-10830
8.2
1%
Mar 20
Path Traversal in eosphoros-ai/db-gpt
Affected: 0.6.0
CVE-2025-0452
8.2
1%
Mar 20
Arbitrary File Deletion in eosphoros-ai/DB-GPT
Affected: 0.6.1
CVE-2024-10906
8.1
0%
Mar 20
Cross-Site Request Forgery (CSRF) in eosphoros-ai/db-gpt
Affected: 0.6.0
CVE-2025-6772
7.5
1%
Jun 27
eosphoros-ai db-gpt import import_flow path traversal
Affected: through 0.7.2
CVE-2024-10829
7.5
1%
Mar 20
Denial of Service (DoS) via Multipart Boundary in eosphoros-ai/db-gpt
Affected: 0.6.0
CVE-2025-51459
6.5
0%
Jul 22
File Upload vulnerability in agent.hub.controller.refresh_plugins in eosphoros-ai DB-GPT 0.7.0 allows remote attackers to execute arbitrary code via a malicious plugin ZIP file…
Affected: 0.7.0
CVE-2025-51458
6.5
0%
Jul 22
SQL Injection in editor_sql_run and query_ex in eosphoros-ai DB-GPT 0.7.0 allows remote attackers to execute arbitrary SQL statements via crafted input passed to the…
Affected: 0.7.0
Showing 13