dbgpt vulnerabilities
CVEs whose affected-version data names the dbgpt package (pip). Each record lists the affected and patched versions; check a specific version with the dependency checker or POST /api/sbom.
3 CVEsRSS
CVE-2024-10830High· 8.2DB-GPT Path Traversal vulnerability
DB-GPT Path Traversal vulnerability
▾ Twilightdbgpt · dbgptEPSS 0.72%via OSV
CVE-2024-10829High· 7.5PoCDB-GPT Uncontrolled Resource Consumption vulnerability
DB-GPT Uncontrolled Resource Consumption vulnerability
▾ Midnightdbgpt · dbgptEPSS 0.72%via OSV
CVE-2024-10906High· 7.1DB-GPT vulnerable to Cross-Site Request Forgery
DB-GPT vulnerable to Cross-Site Request Forgery
▾ Twilightdbgpt · dbgptEPSS 0.24%via OSV