Vulnerabilidades em significant-gravitas

41 resultados
Análise Vexday

A Significant Gravitas apresenta um perfil de risco moderado com 8 vulnerabilidades catalogadas, sendo 1 de severidade crítica. Não há evidência de exploração ativa em campo (0 no KEV), e nenhuma vulnerabilidade foi publicada nos últimos 90 dias, sugerindo um risco atual contido. A fraqueza dominante é injeção de comando (CWE-78), típica de falhas em validação de entrada, exigindo atenção em processos de sanitização de dados.

CVE-2024-8156HIGHCommand Injection in significant-gravitas/autogptEPSS 1.7%CVE-2025-1040HIGHServer-Side Template Injection (SSTI) in significant-gravitas/autogptEPSS 1.6%CVE-2024-1881HIGHImproper Neutralization of Special Elements used in an OS Command in significant-gravitas/autogptEPSS 1.4%CVE-2026-24780HIGHAutoGPT is Vulnerable to RCE via Disabled Block ExecutionEPSS 1.1%CVE-2024-1880HIGHOS Command Injection in MacOS Text-To-Speech Class in significant-gravitas/autogptEPSS 1.0%CVE-2024-6091CRITICALShell Command Denylist Bypass in significant-gravitas/autogptEPSS 0.8%CVE-2025-22603HIGHAutoGPT SSRF vulnerabilityEPSS 0.6%CVE-2025-0454HIGHSSRF Check Bypass in Requests Utility in significant-gravitas/autogptEPSS 0.5%CVE-2025-32392HIGHAutoGPT has a DoS vulnerability in LoopVideoBlockEPSS 0.5%CVE-2024-10457MEDIUMSSRF Vulnerabilities in significant-gravitas/autogptEPSS 0.5%CVE-2024-1879HIGHCSRF to RCE in significant-gravitas/autogptEPSS 0.5%CVE-2026-26020CRITICALAutoGPT Affected by Remote Code Execution via Dynamic Module Import in Block Loading (__import__)EPSS 0.5%CVE-2026-26006MEDIUMRedos (Regular Expression Denial of Service) at Code Extraction Block in significant-gravitas/autogptEPSS 0.5%CVE-2025-31490HIGHAutoGPT allows SSRF due to DNS Rebinding in requests wrapperEPSS 0.5%CVE-2025-31491HIGHAutoGPT allows leakage of cross-domain cookies and protected headers in requests redirectEPSS 0.5%CVE-2023-37275LOWSystem logs spoofable in Auto-GPT via ANSI control sequencesEPSS 0.4%CVE-2025-53944HIGHAutoGPT Platform Exposes Graph Execution Results via Authorization GapEPSS 0.4%CVE-2026-22038HIGHAutoGPT's API Keys and Secrets Logged in Plaintext in Stagehand Integration BlocksEPSS 0.4%CVE-2025-32424HIGHAutoGPT has a DoS vulnerability in ScreenshotWebPageBlockEPSS 0.4%CVE-2025-32422HIGHAutoGPT has a DoS vulnerability in FileStoreBlock with StepThroughItemsBlockEPSS 0.4%