Skip to content
OpenAdvisories

Vendor

chatchat-space

8 known vulnerabilities.

4 results · Clear filters · Feed

  • Medium 6.3

    chatchat-space Langchain-Chatchat Compatible File Service openai_routes.py delete_file missing authentication

    A vulnerability was detected in chatchat-space Langchain-Chatchat up to 0.3.1.3. This vulnerability affects the function files/list_files/retrieve_file/retrieve_file_content/delete_file of the file libs/chatchat-server/chatchat/server/api_server/openai_routes…

  • Medium 5.5

    chatchat-space Langchain-Chatchat file path traversal

    A vulnerability, which was classified as critical, has been found in chatchat-space Langchain-Chatchat up to 0.3.1. This issue affects some unknown processing of the file /v1/file. The manipulation of the argument flag leads to path traversal. The exploit has…

  • Medium 4.3

    chatchat-space Langchain-Chatchat files path traversal

    A vulnerability classified as problematic was found in chatchat-space Langchain-Chatchat up to 0.3.1. This vulnerability affects unknown code of the file /v1/files?purpose=assistants. The manipulation leads to path traversal. The attack can be initiated remot…

  • Medium 6.3

    chatchat-space Langchain-Chatchat Backend upload_temp_docs path traversal

    A vulnerability classified as critical has been found in chatchat-space Langchain-Chatchat up to 0.3.1. This affects the function upload_temp_docs of the file /knowledge_base/upload_temp_docs of the component Backend. The manipulation of the argument flag lea…