Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2025-49073 State: PUBLISHED Published: 2025-06-06T12:13:28.749Z Last Updated: 2025-06-06T16:07:43.712Z Severity: CRITICAL (CVSS 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H) Vendors: Axiomthemes Products: Sweet Dessert Problem Types: CWE-502 Description: Deserialization of Untrusted Data vulnerability in Axiomthemes Sweet Dessert allows Object Injection.This issue affects Sweet Dessert: from n/a before 1.1.13. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/wordpress/theme/sweet-dessert/vulnerability/wordpress-sweet-dessert-1-1-13-php-object-injection-vulnerability?_s_id=cve
CVE ID: CVE-2025-49074 State: PUBLISHED Published: 2025-06-06T11:34:21.081Z Last Updated: 2025-06-06T15:59:59.381Z Severity: MEDIUM (CVSS 6.5 CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:L) Vendors: ThemesGrove Products: WidgetKit Problem Types: CWE-79 Description: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in ThemesGrove WidgetKit allows Stored XSS.This issue affects WidgetKit: from n/a through 2.5.4. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/wordpress/plugin/widgetkit-for-elementor/vulnerability/wordpress-widgetkit-plugin-2-5-4-cross-site-scripting-xss-vulnerability?_s_id=cve
CVE ID: CVE-2025-49075 State: PUBLISHED Published: 2025-06-06T11:35:32.895Z Last Updated: 2025-06-06T15:55:50.329Z Severity: MEDIUM (CVSS 6.5 CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:L) Vendors: PickPlugins Products: Wishlist Problem Types: CWE-79 Description: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in PickPlugins Wishlist allows Stored XSS.This issue affects Wishlist: from n/a through 1.0.43. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/wordpress/plugin/wishlist/vulnerability/wordpress-wishlist-plugin-1-0-43-cross-site-scripting-xss-vulnerability?_s_id=cve
CVE ID: CVE-2025-49076 State: PUBLISHED Published: 2025-06-06T11:36:40.429Z Last Updated: 2025-06-06T15:54:46.800Z Severity: MEDIUM (CVSS 6.5 CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:L) Vendors: POSIMYTH Innovations Products: The Plus Addons for Elementor Page Builder Lite Problem Types: CWE-79 Description: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in POSIMYTH Innovations The Plus Addons for Elementor Page Builder Lite allows Stored XSS.This issue affects The Plus Addons for Elementor Page Builder Lite: from n/a through 6.2.7. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/wordpress/p
ough 6.2.7. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/wordpress/plugin/the-plus-addons-for-elementor-page-builder/vulnerability/wordpress-the-plus-addons-for-elementor-page-builder-lite-plugin-6-2-7-cross-site-scripting-xss-vulnerability?_s_id=cve
CVE ID: CVE-2025-49077 State: PUBLISHED Published: 2025-06-06T11:18:47.844Z Last Updated: 2025-06-06T15:07:43.820Z Severity: MEDIUM (CVSS 4.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N) Vendors: ThemeHigh Products: Dynamic Pricing and Discount Rules Problem Types: CWE-352 Description: Cross-Site Request Forgery (CSRF) vulnerability in ThemeHigh Dynamic Pricing and Discount Rules allows Cross Site Request Forgery.This issue affects Dynamic Pricing and Discount Rules: from n/a through 2.2.9. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://patchstack.com/database/wordpress/plugin/discount-and-dynamic-pricing/vulnerability/wordpress-dynamic-pricing-and-discount-rules-p
.com/database/wordpress/plugin/discount-and-dynamic-pricing/vulnerability/wordpress-dynamic-pricing-and-discount-rules-plugin-2-2-9-cross-site-request-forgery-csrf-vulnerability?_s_id=cve
CVE ID: CVE-2025-49080 State: PUBLISHED Published: 2025-06-12T17:08:50.086Z Last Updated: 2025-06-17T18:17:08.994Z Vendors: Absolute Security Products: Secure Access Description: There is a memory management vulnerability in Absolute Secure Access server versions 9.0 to 13.54. Attackers with network access to the server can cause a Denial of Service by sending a specially crafted sequence of packets to the server. The attack complexity is low, there are no attack requirements, privileges, or user interaction required. Loss of availability is high; there is no impact on confidentiality or integrity. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.absolute.com/plat
identiality or integrity. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.absolute.com/platform/security-information/vulnerability-archive/cve-2025-49080
CVE ID: CVE-2025-49081 State: PUBLISHED Published: 2025-06-12T17:25:47.812Z Last Updated: 2025-06-12T17:59:46.307Z Vendors: Absolute Security Products: Secure Access Description: There is an insufficient input validation vulnerability in the warehouse component of Absolute Secure Access prior to server version 13.55. Attackers with system administrator permissions can impair the availability of the Secure Access administrative UI by writing invalid data to the warehouse over the network. The attack complexity is low, there are no attack requirements, privileges required are high, and there is no user interaction required. There is no impact on confidentiality or integrity; the impact on avai
high, and there is no user interaction required. There is no impact on confidentiality or integrity; the impact on availability is high. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.absolute.com/platform/security-information/vulnerability-archive/cve-2025-49081
CVE ID: CVE-2025-49082 State: PUBLISHED Published: 2025-07-30T23:45:30.677Z Last Updated: 2025-07-31T13:30:00.892Z Vendors: Absolute Security Products: Secure Access Description: CVE-2025-49082 is a vulnerability in the management console of Absolute Secure Access prior to version 13.56. Attackers with administrative access to the console and who have been assigned a certain set of permissions can bypass those permissions to improperly read other settings. The attack complexity is low, there are no preexisting attack requirements; the privileges required are high, and there is no user interaction required. The impact to system confidentiality is low, there is no impact to system availability
is no user interaction required. The impact to system confidentiality is low, there is no impact to system availability or integrity. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.absolute.com/platform/security-information/vulnerability-archive/cve-2025-49082
CVE ID: CVE-2025-49083 State: PUBLISHED Published: 2025-07-30T23:30:52.664Z Last Updated: 2025-07-31T13:37:21.184Z Vendors: Absolute Security Products: Secure Access Description: CVE-2025-49083 is a vulnerability in the management console of Absolute Secure Access after version 12.00 and prior to version 13.56. Attackers with administrative access to the console can cause unsafe content to be deserialized and executed in the security context of the console. The attack complexity is low and there are no attack requirements. Privileges required are high and there is no user interaction required. The impact to confidentiality is low, impact to integrity is high and there is no impact to availab
nteraction required. The impact to confidentiality is low, impact to integrity is high and there is no impact to availability. The impact to the confidentiality and integrity of subsequent systems is low and there is no subsequent system impact to availability. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.absolute.com/platform/security-information/vulnerability-archive/cve-2025-49083
CVE ID: CVE-2025-49084 State: PUBLISHED Published: 2025-07-30T23:36:17.426Z Last Updated: 2025-07-31T13:33:49.578Z Vendors: Absolutee Security Products: Secure Access Description: CVE-2025-49084 is a vulnerability in the management console of Absolute Secure Access prior to version 13.56. Attackers with administrative access can overwrite policy rules without the requisite permissions. The attack complexity is low, attack requirements are present, privileges required are high and no user interaction is required. There is no impact to confidentiality, the impact to integrity is low, and there is no impact to availability. The impact to confidentiality and availability of subsequent systems is
is low, and there is no impact to availability. The impact to confidentiality and availability of subsequent systems is high and the impact to the integrity of subsequent systems is low. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.absolute.com/platform/security-information/vulnerability-archive/cve-2025-49084
CVE ID: CVE-2025-49087 State: PUBLISHED Published: 2025-07-20T00:00:00.000Z Last Updated: 2025-07-21T20:37:09.142Z Severity: MEDIUM (CVSS 4 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:C/C:L/I:N/A:N) Vendors: Mbed Products: mbedtls Problem Types: CWE-385 Description: In Mbed TLS 3.6.1 through 3.6.3 before 3.6.4, a timing discrepancy in block cipher padding removal allows an attacker to recover the plaintext when PKCS#7 padding mode is used. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://mbed-tls.readthedocs.io/en/latest/tech-updates/security-advisories/ - https://github.com/Mbed-TLS/mbedtls-docs/blob/main/security-advisories/mbedtls-security-advisory-2025-06-5.md
CVE ID: CVE-2025-49089 State: PUBLISHED Published: 2025-09-15T00:00:00.000Z Last Updated: 2025-09-15T18:48:59.552Z Vendors: n/a Products: n/a Problem Types: n/a Description: wangxutech MoneyPrinterTurbo 1.2.6 allows path traversal via /api/v1/download/ URIs such as /api/v1/download//etc/passwd. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.wangxutech.com - https://github.com/harry0703/MoneyPrinterTurbo - https://moneyprinterturbo.net - https://gist.github.com/Theresasu1/3a9ced1f3d8208cc9f99ce34057cf681
CVE ID: CVE-2025-49090 State: PUBLISHED Published: 2025-10-02T00:00:00.000Z Last Updated: 2025-10-02T19:35:08.439Z Severity: HIGH (CVSS 7.1 CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:C/C:N/I:H/A:L) Vendors: Matrix Products: Matrix specification Problem Types: CWE-642 Description: The Matrix specification before 1.16 (i.e., with a room version before 12 and State Resolution before 2.1) has deficient state resolution. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://matrix.org/blog/2025/08/security-release/ - https://github.com/Nheko-Reborn/nheko/issues/1931 - https://github.com/matrix-org/matrix-spec/releases/tag/v1.16 - https://matrix.org/blog/2025/08/project-hydra-improving-stat
ps://github.com/matrix-org/matrix-spec/releases/tag/v1.16 - https://matrix.org/blog/2025/08/project-hydra-improving-state-res/
CVE ID: CVE-2025-49091 State: PUBLISHED Published: 2025-06-11T00:00:00.000Z Last Updated: 2025-06-18T00:12:14.361Z Severity: HIGH (CVSS 8.2 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:C/C:H/I:H/A:L) Vendors: KDE Products: Konsole Problem Types: CWE-670 Description: KDE Konsole before 25.04.2 allows remote code execution in a certain scenario. It supports loading URLs from the scheme handlers such as a ssh:// or telnet:// or rlogin:// URL. This can be executed regardless of whether the ssh, telnet, or rlogin binary is available. In this mode, there is a code path where if that binary is not available, Konsole falls back to using /bin/bash for the given arguments (i.e., the URL) provided. This allows an at
not available, Konsole falls back to using /bin/bash for the given arguments (i.e., the URL) provided. This allows an attacker to execute arbitrary code. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://invent.kde.org/utilities/konsole/-/tags - https://konsole.kde.org/changelog.html - https://www.openwall.com/lists/oss-security/2025/06/10/5 - https://invent.kde.org/utilities/konsole/-/commit/09d20dea109050b4c02fb73095f327b5642a2b75 - https://kde.org/info/security/advisory-20250609-1.txt - https://proofnet.de/publikationen/konsole_rce.html
CVE ID: CVE-2025-49112 State: PUBLISHED Published: 2025-06-02T00:00:00.000Z Last Updated: 2025-06-02T16:58:20.615Z Severity: LOW (CVSS 3.1 CVSS:3.1/AV:A/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L) Vendors: Valkey Products: Valkey Problem Types: CWE-191 Description: setDeferredReply in networking.c in Valkey through 8.1.1 has an integer underflow for prev->size - prev->used. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://github.com/valkey-io/valkey/blob/daea05b1e26db29bfd1c033e27f9d519a2f8ccbb/src/networking.c#L886 - https://github.com/valkey-io/valkey/pull/2101 - https://github.com/redis/redis/blob/994bc96bb1744cb153392fc96bdba43eae56e17f/src/networking.c#L783
CVE ID: CVE-2025-49113 State: PUBLISHED Published: 2025-06-02T00:00:00.000Z Last Updated: 2025-06-12T16:09:32.854Z Severity: CRITICAL (CVSS 9.9 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H) Vendors: Roundcube Products: Webmail Problem Types: CWE-502 Description: Roundcube Webmail before 1.5.10 and 1.6.x before 1.6.11 allows remote code execution by authenticated users because the _from parameter in a URL is not validated in program/actions/settings/upload.php, leading to PHP Object Deserialization. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://roundcube.net/news/2025/06/01/security-updates-1.6.11-and-1.5.10 - https://github.com/roundcube/ro
References: - https://roundcube.net/news/2025/06/01/security-updates-1.6.11-and-1.5.10 - https://github.com/roundcube/roundcubemail/pull/9865 - https://github.com/roundcube/roundcubemail/releases/tag/1.6.11 - https://github.com/roundcube/roundcubemail/commit/0376f69e958a8fef7f6f09e352c541b4e7729c4d - https://github.com/roundcube/roundcubemail/releases/tag/1.5.10 - https://github.com/roundcube/roundcubemail/commit/7408f31379666124a39f9cb1018f62bc5e2dc695 - https://github.com/roundcube/roundcubemail/commit/c50a07d88ca38f018a0f4a0b008e9a1deb32637e - https://fearsoff.org/research/roundcube - https://www.vicarius.io/vsociety/posts/cve-2025-49113-roundcube-vulnerability-detection - https://www.vic
ch/roundcube - https://www.vicarius.io/vsociety/posts/cve-2025-49113-roundcube-vulnerability-detection - https://www.vicarius.io/vsociety/posts/cve-2025-49113-roundcube-mitigation-script
CVE ID: CVE-2025-49124 State: PUBLISHED Published: 2025-06-16T14:22:16.288Z Last Updated: 2025-10-29T14:25:42.691Z Vendors: Apache Software Foundation Products: Apache Tomcat Problem Types: CWE-426 Description: Untrusted Search Path vulnerability in Apache Tomcat installer for Windows. During installation, the Tomcat installer for Windows used icacls.exe without specifying a full path. This issue affects Apache Tomcat: from 11.0.0-M1 through 11.0.7, from 10.1.0 through 10.1.41, from 9.0.23 through 9.0.105. The following versions were EOL at the time the CVE was created but are known to be affected: 8.5.0 through 8.5.100 and 7.0.95 through 7.0.109. Other EOL versions may also be affected. Use
are known to be affected: 8.5.0 through 8.5.100 and 7.0.95 through 7.0.109. Other EOL versions may also be affected. Users are recommended to upgrade to version 11.0.8, 10.1.42 or 9.0.106, which fix the issue. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://lists.apache.org/thread/lnow7tt2j6hb9kcpkggx32ht6o90vqzv
CVE ID: CVE-2025-49125 State: PUBLISHED Published: 2025-06-16T14:18:09.610Z Last Updated: 2025-11-03T20:05:06.721Z Vendors: Apache Software Foundation Products: Apache Tomcat Problem Types: CWE-288 Description: Authentication Bypass Using an Alternate Path or Channel vulnerability in Apache Tomcat. When using PreResources or PostResources mounted other than at the root of the web application, it was possible to access those resources via an unexpected path. That path was likely not to be protected by the same security constraints as the expected path, allowing those security constraints to be bypassed. This issue affects Apache Tomcat: from 11.0.0-M1 through 11.0.7, from 10.1.0-M1 through 10
y constraints to be bypassed. This issue affects Apache Tomcat: from 11.0.0-M1 through 11.0.7, from 10.1.0-M1 through 10.1.41, from 9.0.0.M1 through 9.0.105. The following versions were EOL at the time the CVE was created but are known to be affected: 8.5.0 through 8.5.100. Other, older, EOL versions may also be affected. Users are recommended to upgrade to version 11.0.8, 10.1.42 or 9.0.106, which fix the issue. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://lists.apache.org/thread/m66cytbfrty9k7dc4cg6tl1czhsnbywk
CVE ID: CVE-2025-49126 State: PUBLISHED Published: 2025-06-23T17:18:51.857Z Last Updated: 2025-06-23T17:39:29.542Z Severity: HIGH (CVSS 8.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:L/A:L) Vendors: Visionatrix Products: Visionatrix Problem Types: CWE-79 Description: Visionatrix is an AI Media processing tool using ComfyUI. In versions 1.5.0 to before 2.5.1, the /docs/flows endpoint is vulnerable to a Reflected XSS (Cross-Site Scripting) attack allowing full takeover of the application and exfiltration of secrets stored in the application. The implementation uses the get_swagger_ui_html function from FastAPI. This function does not encode or sanitize its arguments before using them to generate t
r_ui_html function from FastAPI. This function does not encode or sanitize its arguments before using them to generate the HTML for the swagger documentation page and is not intended to be used with user-controlled arguments. Any user of this application can be targeted with a one-click attack that can takeover their session and all the secrets that may be contained within it. This issue has been patched in version 2.5.1. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://github.com/Visionatrix/Visionatrix/security/advisories/GHSA-w36r-9jvx-q48v - https://github.com/Visionatrix/Visionatrix/commit/63aafe6e4d1bffe4bf69e73b6fdfc65c71a8f5b8
CVE ID: CVE-2025-49127 State: PUBLISHED Published: 2025-06-06T20:23:25.120Z Last Updated: 2025-06-09T15:14:41.161Z Vendors: kafbat Products: kafka-ui Problem Types: CWE-502 Description: Kafbat UI is a web user interface for managing Apache Kafka clusters. An unsafe deserialization vulnerability in version 1.0.0 allows any unauthenticated user to execute arbitrary code on the server. Version 1.1.0 fixes the issue. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://github.com/kafbat/kafka-ui/security/advisories/GHSA-g3mf-c374-fgh2 - https://github.com/kafbat/kafka-ui/releases/tag/v1.1.0
CVE ID: CVE-2025-49128 State: PUBLISHED Published: 2025-06-06T21:18:27.561Z Last Updated: 2025-06-09T15:13:59.240Z Severity: MEDIUM (CVSS 4 CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N) Vendors: FasterXML Products: jackson-core Problem Types: CWE-209 Description: Jackson-core contains core low-level incremental ("streaming") parser and generator abstractions used by Jackson Data Processor. Starting in version 2.0.0 and prior to version 2.13.0, a flaw in jackson-core's `JsonLocation._appendSourceDesc` method allows up to 500 bytes of unintended memory content to be included in exception messages. When parsing JSON from a byte array with an offset and length, the exception message incorrectly
in exception messages. When parsing JSON from a byte array with an offset and length, the exception message incorrectly reads from the beginning of the array instead of the logical payload start. This results in possible information disclosure in systems using pooled or reused buffers, like Netty or Vert.x. This issue was silently fixed in jackson-core version 2.13.0, released on September 30, 2021, via PR #652. All users should upgrade to version 2.13.0 or later. If upgrading is not immediately possible, applications can mitigate the issue by disabling exception message exposure to clients to avoid returning parsing exception messages in HTTP responses and/or disabling source inclusion in e
posure to clients to avoid returning parsing exception messages in HTTP responses and/or disabling source inclusion in exceptions to prevent Jackson from embedding any source content in exception messages, avoiding leakage. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://github.com/FasterXML/jackson-core/security/advisories/GHSA-wf8f-6423-gfxg - https://github.com/FasterXML/jackson-core/pull/652 - https://github.com/FasterXML/jackson-core/commit/a6c297682737dde13337cb7c3020f299518609a8
CVE ID: CVE-2025-49130 State: PUBLISHED Published: 2025-06-09T12:49:37.837Z Last Updated: 2025-06-09T14:07:51.774Z Vendors: barryvdh Products: laravel-translation-manager Problem Types: CWE-79 Description: Laravel Translation Manager is a package to manage Laravel translation files. Prior to version 0.6.8, the application is vulnerable to Cross-Site Scripting (XSS) attacks due to incorrect input validation and sanitization of user-input data. An attacker can inject arbitrary HTML code, including JavaScript scripts, into the page processed by the user's browser, allowing them to steal sensitive data, hijack user sessions, or conduct other malicious activities. Only authenticated users with ac
m to steal sensitive data, hijack user sessions, or conduct other malicious activities. Only authenticated users with access to the translation manager are impacted. The issue is fixed in version 0.6.8. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://github.com/barryvdh/laravel-translation-manager/security/advisories/GHSA-j226-63j7-qrqh - https://github.com/barryvdh/laravel-translation-manager/pull/475 - https://github.com/barryvdh/laravel-translation-manager/commit/527446ed419f90f2319675fc5211cb8f851d7a1f - https://github.com/barryvdh/laravel-translation-manager/releases/tag/v0.6.8
CVE ID: CVE-2025-49131 State: PUBLISHED Published: 2025-06-09T12:42:46.513Z Last Updated: 2025-06-09T14:40:02.668Z Severity: MEDIUM (CVSS 6.3 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L) Vendors: labring Products: FastGPT Problem Types: CWE-732 Description: FastGPT is an open-source project that provides a platform for building, deploying, and operating AI-driven workflows and conversational agents. The Sandbox container (fastgpt-sandbox) is a specialized, isolated environment used by FastGPT to safely execute user-submitted or dynamically generated code in isolation. The sandbox before version 4.9.11 has insufficient isolation and inadequate restrictions on code execution by allowing overl
sandbox before version 4.9.11 has insufficient isolation and inadequate restrictions on code execution by allowing overly permissive syscalls, which allows attackers to escape the intended sandbox boundaries. Attackers could exploit this to read and overwrite arbitrary files and bypass Python module import restrictions. This is patched in version 4.9.11 by restricting the allowed system calls to a safer subset and additional descriptive error messaging. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://github.com/labring/FastGPT/security/advisories/GHSA-f3pf-r3g7-g895 - https://github.com/labring/FastGPT/pull/4958 - https://github.com/labring/FastGPT/commit/bb810a43a1c
SA-f3pf-r3g7-g895 - https://github.com/labring/FastGPT/pull/4958 - https://github.com/labring/FastGPT/commit/bb810a43a1c70683fab7f5fe993771e930a94426 - https://github.com/labring/FastGPT/pkgs/container/fastgpt-sandbox - https://github.com/labring/FastGPT/releases/tag/v4.9.11