Eosphoros-ai vulnerabilities

Products

• Db-gpt 11
• Eosphoros-ai/db-gpt 10

Newest

• eosphoros-ai db-gpt eosphoros-ai DB-GPT Jinja2 Template __init__.py FileBasedSkill.get_prompt special elements in template engine CVE-2026-123020 5.3 MediumNovember 5, 2026
• eosphoros-ai db-gpt eosphoros-ai DB-GPT HuggingFace Adapter hf_adapter.py exec_module inclusion of functionality from untrusted control sphere CVE-2026-123019 6.9 MediumNovember 5, 2026
• eosphoros-ai db-gpt eosphoros-ai DB-GPT CodeAction code_utils.py execute_code code injection CVE-2026-123018 6.9 MediumNovember 5, 2026
• eosphoros-ai db-gpt DB-GPT through 0.8.2 Hardcoded MySQL Root Credentials in docker-compose Deployment CVE-2026-77933 9.3 CriticalOctober 20, 2026
• eosphoros-ai db-gpt DB-GPT through 0.8.2 Unauthenticated RCE via /api/v1/chat/react-agent CVE-2026-77932 9.3 CriticalOctober 20, 2026
• eosphoros-ai db-gpt DB-GPT 0.8.0 Path Traversal Arbitrary File Write via Skill Upload Filename CVE-2026-80104 9.3 CriticalAugust 25, 2026
• eosphoros-ai db-gpt DB-GPT v0.8.1 Path Traversal Arbitrary File Write via user_id Header CVE-2026-73034 Public exploit 9.3 CriticalAugust 11, 2026
• eosphoros-ai db-gpt eosphoros-ai DB-GPT FastAPI Endpoint controller.py module_plugin.refresh_plugins unrestricted upload CVE-2026-4505 5.3 MediumMarch 20, 2026
• eosphoros-ai db-gpt eosphoros-ai db-gpt Incomplete Fix editor sql injection CVE-2026-4504 6.9 MediumMarch 20, 2026
• eosphoros-ai db-gpt eosphoros-ai db-gpt Flow Import Endpoint import importlib.machinery.SourceFileLoader.exec_module code injection CVE-2026-3409 6.9 MediumMarch 2, 2026
• dbgpt db-gpt eosphoros-ai db-gpt import import_flow path traversal CVE-2025-6772 6.9 MediumJune 27, 2025
• dbgpt db-gpt, eosphoros-ai eosphoros-ai/db-gpt +1 more Path Traversal in eosphoros-ai/db-gpt CVE-2024-10830 8.2 HighMarch 20, 2025
• dbgpt db-gpt, eosphoros-ai eosphoros-ai/db-gpt +1 more Arbitrary File Write in eosphoros-ai/db-gpt CVE-2024-10834 9.1 CriticalMarch 20, 2025
• dbgpt db-gpt, eosphoros-ai eosphoros-ai/db-gpt +1 more Arbitrary File Write in eosphoros-ai/db-gpt CVE-2024-10833 Fix available 9.1 CriticalMarch 20, 2025
• dbgpt db-gpt, eosphoros-ai eosphoros-ai/db-gpt +1 more Cross-Site Request Forgery (CSRF) in eosphoros-ai/db-gpt CVE-2024-10906 7.1 HighMarch 20, 2025
• dbgpt db-gpt, eosphoros-ai eosphoros-ai/db-gpt +1 more Denial of Service (DoS) via Multipart Boundary in eosphoros-ai/db-gpt CVE-2024-10829 Public exploit 7.5 HighMarch 20, 2025
• dbgpt db-gpt, eosphoros-ai eosphoros-ai/db-gpt +1 more Arbitrary File Write via DuckDB SQL Injection in eosphoros-ai/db-gpt CVE-2024-10901 9.1 CriticalMarch 20, 2025
• dbgpt db-gpt, eosphoros-ai eosphoros-ai/db-gpt +1 more Arbitrary File Write via SQL Injection in eosphoros-ai/db-gpt CVE-2024-10835 Fix available 9.1 CriticalMarch 20, 2025
• dbgpt db-gpt, eosphoros-ai eosphoros-ai/db-gpt +1 more Arbitrary File Upload with Path Traversal in eosphoros-ai/db-gpt CVE-2024-10902 9.1 CriticalMarch 20, 2025
• dbgpt db-gpt, eosphoros-ai eosphoros-ai/db-gpt +1 more Arbitrary File Write through Absolute Path Traversal in eosphoros-ai/db-gpt CVE-2024-10831 9.1 CriticalMarch 20, 2025
• dbgpt db-gpt, eosphoros-ai eosphoros-ai/db-gpt +1 more Arbitrary File Deletion in eosphoros-ai/DB-GPT CVE-2025-0452 8.2 HighMarch 20, 2025