astrbot vulnerabilities (PyPI)
8 vulnerabilities.
-
astrbotPyPI AstrBotDevs AstrBot astr_main_agent.py astr_main_agent authorization 5.3 Medium -
astrbotPyPI AstrBotDevs AstrBot File Upload chat.py post_file path traversal 5.3 Medium -
astrbotPyPI AstrBotDevs AstrBot Dashboard auth.py hard-coded credentials 6.9 Medium -
astrbotPyPI AstrBotDevs AstrBot Dashboard API t2i.py create_template special elements used in a template engine 5.1 Medium -
astrbotPyPI AstrBot is vulnerable to RCE with hard-coded JWT signing keys 7.3 High -
astrbotPyPI AstrBot contains a directory traversal vulnerability 7.5 High -
astrbotPyPI AstrBot has an arbitrary file read vulnerability in function _encode_image_bs64 6.5 Medium -
astrbotPyPI AstrBot Has Path Traversal Vulnerability in /api/chat/get_file 7.5 High