Vulnerabilidades en Significant-Gravitas
40 resultadosAnálisis Vexday
A Significant-Gravitas apresenta 32 vulnerabilidades cadastradas, com 17 publicadas nos últimos 90 dias, indicando atividade recente de descoberta de falhas. Nenhuma CVE está sob exploração ativa conhecida (KEV), mas 3 vulnerabilidades críticas (CVSS) e a prevalência de CWE-400 (Uncontrolled Resource Consumption) sugerem riscos de negação de serviço que devem ser monitorados. O ritmo de divulgações mantém este fornecedor em zona de atenção para gestão de patches.
CVE-2025-32437HIGHAutoGPT has a DoS vulnerability in MediaDurationBlockEPSS 0.4%CVE-2026-33232HIGHAutoGPT: Unauthenticated DoS via Disk Space ExhaustionEPSS 0.4%CVE-2025-32393HIGHAutoGPT has a DoS vulnerability in ReadRSSFeedBlockEPSS 0.4%CVE-2026-30950HIGHAutoGPT has Authenticated Session Hijacking via IDOREPSS 0.4%CVE-2025-32436HIGHAutoGPT has a DoS vulnerability in AddAudioToVideoBlockEPSS 0.4%CVE-2025-31494LOWAutoGPT allows cross-user sharing of node execution results through WebSockets APIEPSS 0.4%CVE-2023-37273HIGHDocker escape in Auto-GPT when running from docker-compose.yml included in git repoEPSS 0.4%CVE-2025-62615CRITICALAutoGPT has SSRF vulnerability in ReadRSSFeedBlockEPSS 0.4%CVE-2023-37274HIGHPython code execution sandbox escape in non-docker version in Auto-GPTEPSS 0.4%CVE-2025-62616CRITICALAutoGPT has SSRF vulnerability in SendDiscordFileBlockEPSS 0.3%CVE-2026-55237HIGHAutoGPT SignUp Page has DOM-Based XSS and Open RedirectEPSS 0.3%CVE-2026-33235HIGHAutoGPT: Denial of Service (DoS) via Resource Exhaustion in text templating featuresEPSS 0.3%CVE-2026-33234MEDIUMAutoGPT: SendEmailBlock's IP blocklist bypass allows SSRF via user-controlled SMTP serverEPSS 0.3%CVE-2025-32394MEDIUMAutoGPT: There is a DoS vulnerability in AITextSummarizerBlockEPSS 0.2%CVE-2025-32423MEDIUMAutoGPT: There is a DoS vulnerability in ExtractTextInformationBlockEPSS 0.2%CVE-2026-33233HIGHAutoGPT Platform: Remote Code Execution via Unsafe Pickle Deserialization of Redis Cache EntriesEPSS 0.2%CVE-2026-56663HIGHAutoGPT: SSRF-to-RCE Chain in `SendWebRequestBlock` via IP validation bypass and internal `pg-meta` accessEPSS 0.2%CVE-2026-45023MEDIUMAutoGPT: Credit system bypassed via direct block execution in POST /api/blocks/{block_id}/executeEPSS 0.2%CVE-2025-32425MEDIUMAutoGPT has missing Docker log rotation on platform containers that allows host disk-exhaustion DoSEPSS 0.2%CVE-2026-56823MEDIUMAutoGPT: IDOR in Webhook Ping Endpoint Allows Enumeration and Cross-User Ping TriggeringEPSS 0.1%