Vulnerabilities in eosphoros-ai
14 resultsCVE-2024-10902CRITICALArbitrary File Upload with Path Traversal in eosphoros-ai/db-gptEPSS 1.2%CVE-2024-10835CRITICALArbitrary File Write via SQL Injection in eosphoros-ai/db-gptEPSS 1.1%CVE-2024-10901CRITICALArbitrary File Write via DuckDB SQL Injection in eosphoros-ai/db-gptEPSS 1.0%CVE-2024-10833CRITICALArbitrary File Write in eosphoros-ai/db-gptEPSS 0.8%CVE-2024-10831CRITICALArbitrary File Write through Absolute Path Traversal in eosphoros-ai/db-gptEPSS 0.8%CVE-2024-10830HIGHPath Traversal in eosphoros-ai/db-gptEPSS 0.7%CVE-2024-10829HIGHDenial of Service (DoS) via Multipart Boundary in eosphoros-ai/db-gptEPSS 0.7%CVE-2024-10834CRITICALArbitrary File Write in eosphoros-ai/db-gptEPSS 0.6%CVE-2025-6772MEDIUMeosphoros-ai db-gpt import import_flow path traversalEPSS 0.5%CVE-2025-0452HIGHArbitrary File Deletion in eosphoros-ai/DB-GPTEPSS 0.5%CVE-2026-3409MEDIUMeosphoros-ai db-gpt Flow Import Endpoint import importlib.machinery.SourceFileLoader.exec_module code injectionEPSS 0.3%CVE-2026-4504MEDIUMeosphoros-ai db-gpt Incomplete Fix editor sql injectionEPSS 0.3%CVE-2024-10906HIGHCross-Site Request Forgery (CSRF) in eosphoros-ai/db-gptEPSS 0.2%CVE-2026-4505MEDIUMeosphoros-ai DB-GPT FastAPI Endpoint controller.py module_plugin.refresh_plugins unrestricted uploadEPSS 0.2%