DB
Product
Db-gpt
13
CVEs
0
On KEV
9.8
Max CVSS
0
New 30D
Severity mix
Critical 6High 5Medium 2Low 0
Watch
Add Db-gpt to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2024-10901 | 9.8 | Mar 20 | Arbitrary File Write via DuckDB SQL Injection in eosphoros-ai/db-gpt Affected: 0.6.0 |
| CVE-2024-10835 | 9.8 | Mar 20 | Arbitrary File Write via SQL Injection in eosphoros-ai/db-gpt Affected: 0.6.0 |
| CVE-2024-10902 | 9.8 | Mar 20 | Arbitrary File Upload with Path Traversal in eosphoros-ai/db-gpt Affected: 0.6.0 |
| CVE-2024-10834 | 9.1 | Mar 20 | Arbitrary File Write in eosphoros-ai/db-gpt Affected: 0.6.0 |
| CVE-2024-10833 | 9.1 | Mar 20 | Arbitrary File Write in eosphoros-ai/db-gpt Affected: 0.6.0 |
| CVE-2024-10831 | 9.1 | Mar 20 | Arbitrary File Write through Absolute Path Traversal in eosphoros-ai/db-gpt Affected: 0.6.0 |
Showing 6
