Vulnerabilidades em eosphoros-ai
21 resultadosAnálise Vexday
Eosphoros-ai apresenta um perfil de risco moderado com 14 vulnerabilidades catalogadas, das quais 6 são críticas, mas nenhuma sob exploração ativa conhecida. A fraqueza dominante é CWE-22 (Path Traversal), indicando problemas estruturais de validação de entrada que requerem atenção em auditoria de código. Não há atividade de divulgação recente, sugerindo que o risco é principalmente de natureza histórica e potencial, não imediato.
CVE-2026-73034CRITICALDB-GPT v0.8.1 Path Traversal Arbitrary File Write via user_id HeaderEPSS 5.7%CVE-2024-10902CRITICALArbitrary File Upload with Path Traversal in eosphoros-ai/db-gptEPSS 1.3%CVE-2024-10835CRITICALArbitrary File Write via SQL Injection in eosphoros-ai/db-gptEPSS 1.2%CVE-2026-80104CRITICALDB-GPT 0.8.0 Path Traversal Arbitrary File Write via Skill Upload FilenameEPSS 1.1%CVE-2024-10901CRITICALArbitrary File Write via DuckDB SQL Injection in eosphoros-ai/db-gptEPSS 1.1%CVE-2024-10833CRITICALArbitrary File Write in eosphoros-ai/db-gptEPSS 0.8%CVE-2024-10831CRITICALArbitrary File Write through Absolute Path Traversal in eosphoros-ai/db-gptEPSS 0.8%CVE-2026-77932CRITICALDB-GPT through 0.8.2 Unauthenticated RCE via /api/v1/chat/react-agentEPSS 0.8%CVE-2024-10830HIGHPath Traversal in eosphoros-ai/db-gptEPSS 0.7%CVE-2024-10829HIGHDenial of Service (DoS) via Multipart Boundary in eosphoros-ai/db-gptEPSS 0.7%CVE-2025-6772MEDIUMeosphoros-ai db-gpt import import_flow path traversalEPSS 0.6%CVE-2024-10834CRITICALArbitrary File Write in eosphoros-ai/db-gptEPSS 0.6%CVE-2025-0452HIGHArbitrary File Deletion in eosphoros-ai/DB-GPTEPSS 0.6%CVE-2026-123018MEDIUMeosphoros-ai DB-GPT CodeAction code_utils.py execute_code code injectionEPSS 0.5%CVE-2026-123020MEDIUMeosphoros-ai DB-GPT Jinja2 Template __init__.py FileBasedSkill.get_prompt special elements in template engineEPSS 0.5%CVE-2026-77933CRITICALDB-GPT through 0.8.2 Hardcoded MySQL Root Credentials in docker-compose DeploymentEPSS 0.4%CVE-2026-123019MEDIUMeosphoros-ai DB-GPT HuggingFace Adapter hf_adapter.py exec_module inclusion of functionality from untrusted control sphereEPSS 0.4%CVE-2026-3409MEDIUMeosphoros-ai db-gpt Flow Import Endpoint import importlib.machinery.SourceFileLoader.exec_module code injectionEPSS 0.4%CVE-2026-4504MEDIUMeosphoros-ai db-gpt Incomplete Fix editor sql injectionEPSS 0.3%CVE-2024-10906HIGHCross-Site Request Forgery (CSRF) in eosphoros-ai/db-gptEPSS 0.2%