eosphoros-ai/db-gpt Security Advisories | GitStock

critical2025-03-20

DB-GPT is vulnerable to SQL Injection attacks from unauthenticated users

GHSA-qccg-9m4q-xfm6 · CVE-2024-10835

critical2025-03-20

DB-GPT Absolute Path Traversal in knowledge/{space_name}/document/upload

GHSA-j9g7-mqhh-9hxf · CVE-2024-10833

critical2025-03-20

DB-GPT Absolute Path Traversal vulnerability

GHSA-hhw5-29f6-hf4x · CVE-2024-10831

high2025-03-20

DB-GPT Path Traversal vulnerability

GHSA-8pwp-phcg-h36g · CVE-2024-10830

critical2025-03-20

DB-GPT Arbitrary File Write vulnerability

GHSA-7gj6-22m4-qfhx · CVE-2024-10901

high2025-03-20

DB-GPT Uncontrolled Resource Consumption vulnerability

GHSA-6xgj-c5fx-5v57 · CVE-2024-10829

critical2025-03-20

DB-GPT vulnerable to Arbitrary File Upload with Path Traversal

GHSA-3xq5-x4fj-rff7 · CVE-2024-10902

high2025-03-20

DB-GPT vulnerable to Cross-Site Request Forgery

GHSA-3248-f932-c76p · CVE-2024-10906