Skip to content
OpenAdvisories

Product · arc53

DocsGPT

5 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

2 results · Clear filters · Feed

  • Medium 5.4
    CVE-2026-91201

    DocsGPT through 0.20.0 OAuth Token Disclosure via Wildcard postMessage

    DocsGPT through 0.20.0 posts OAuth connector session tokens to a wildcard target origin in the callback-status endpoint without validating sender origin. Attackers can obtain session tokens and provider account emails by acting as window.opener during OAuth a…

    arc53 DocsGPT
  • Medium 5.3
    CVE-2024-31451

    Limited file write in routes.py (GHSL-2023-250)

    DocsGPT is a GPT-powered chat for documentation. DocsGPT is vulnerable to unauthenticated limited file write in routes.py. This vulnerability is fixed in 0.8.1.

    arc53 DocsGPT