Skip to content
OpenAdvisories

Vendor

eosphoros-ai

21 known vulnerabilities.

2 results · Clear filters · Feed

  • Critical 9.8
    CVE-2026-73034 Public exploit Scanner template

    DB-GPT v0.8.1 Path Traversal Arbitrary File Write via user_id Header

    DB-GPT v0.8.1 contains an unauthenticated path traversal vulnerability that allows remote attackers to write arbitrary files to any location on the server by injecting directory traversal sequences into the user_id HTTP header of the Python file-upload endpoi…

  • High 7.5
    CVE-2024-10829 Public exploit

    Denial of Service (DoS) via Multipart Boundary in eosphoros-ai/db-gpt

    A Denial of Service (DoS) vulnerability in the multipart request boundary processing mechanism of eosphoros-ai/db-gpt v0.6.0 allows unauthenticated attackers to cause excessive resource consumption. The server fails to handle excessive characters appended to …