Advisory Catalog

lollms vulnerable to path traversal due to unauthenticated root folder settings change

A Regular Expression Denial of Service (ReDoS) vulnerability exists in the latest version of gaizhenbiao/chuanhuchatgpt. The vulnerability is located in the filter_history function within the utils.py module. This function takes a user-provided keyword and attempts to match it against chat history f

pytorch-lightning vulnerable to Arbitrary File Write via /v1/runs API endpoint

h2o vulnerable to unexpected POST request shutting down server

vanna vulnerable to remote code execution caused by prompt injection

lollms path traversal vulnerability allows overriding of config.yaml file, leading to RCE

A Server-Side Request Forgery (SSRF) vulnerability exists in the upload processing interface of gaizhenbiao/ChuanhuChatGPT versions <= ChuanhuChatGPT-20240410-git.zip. This vulnerability allows attackers to send crafted requests from the vulnerable server to internal or external resources, potential

litellm vulnerable to remote code execution based on using eval unsafely

litellm vulnerable to improper access control in team management

Path traversal in saltstack

Directory creation by malicious user in saltstack

Cross-site Scripting in djangorestframework

pdoc embeds link to malicious CDN if math mode is enabled