Skip to content
Dbgpt Db-gpt vulnerabilities
-
dbgpt db-gpt
File Upload vulnerability in agent.hub.controller.refresh_plugins in eosphoros-ai DB-GPT 0.7.0...
CVE-2025-51459
6.5 Medium
-
dbgpt db-gpt
SQL Injection in editor_sql_run and query_ex in eosphoros-ai DB-GPT 0.7.0 allows remote attackers...
CVE-2025-51458
Public exploit
6.5 Medium
-
dbgpt db-gpt
eosphoros-ai db-gpt import import_flow path traversal
CVE-2025-6772
6.9 Medium
-
dbgpt db-gpt, eosphoros-ai eosphoros-ai/db-gpt +1 more
Path Traversal in eosphoros-ai/db-gpt
CVE-2024-10830
8.2 High
-
dbgpt db-gpt, eosphoros-ai eosphoros-ai/db-gpt +1 more
Arbitrary File Write in eosphoros-ai/db-gpt
CVE-2024-10834
9.1 Critical
-
dbgpt db-gpt, eosphoros-ai eosphoros-ai/db-gpt +1 more
Arbitrary File Write in eosphoros-ai/db-gpt
CVE-2024-10833
Fix available
9.1 Critical
-
dbgpt db-gpt, eosphoros-ai eosphoros-ai/db-gpt +1 more
Cross-Site Request Forgery (CSRF) in eosphoros-ai/db-gpt
CVE-2024-10906
7.1 High
-
dbgpt db-gpt, eosphoros-ai eosphoros-ai/db-gpt +1 more
Denial of Service (DoS) via Multipart Boundary in eosphoros-ai/db-gpt
CVE-2024-10829
Public exploit
7.5 High
-
dbgpt db-gpt, eosphoros-ai eosphoros-ai/db-gpt +1 more
Arbitrary File Write via DuckDB SQL Injection in eosphoros-ai/db-gpt
CVE-2024-10901
9.1 Critical
-
dbgpt db-gpt, eosphoros-ai eosphoros-ai/db-gpt +1 more
Arbitrary File Write via SQL Injection in eosphoros-ai/db-gpt
CVE-2024-10835
Fix available
9.1 Critical
-
dbgpt db-gpt, eosphoros-ai eosphoros-ai/db-gpt +1 more
Arbitrary File Upload with Path Traversal in eosphoros-ai/db-gpt
CVE-2024-10902
9.1 Critical
-
dbgpt db-gpt, eosphoros-ai eosphoros-ai/db-gpt +1 more
Arbitrary File Write through Absolute Path Traversal in eosphoros-ai/db-gpt
CVE-2024-10831
9.1 Critical
-
dbgpt db-gpt, eosphoros-ai eosphoros-ai/db-gpt +1 more
Arbitrary File Deletion in eosphoros-ai/DB-GPT
CVE-2025-0452
8.2 High