deardaniel/secdata-raw huggingface dataset:
GitHub Security Advisory: GHSA-g3mx-83mp-3rwc
Package: open-webui (PIP)
Severity: HIGH (CVSS 7.5)
CWE: CWE-400: Uncontrolled Resource Consumption
Vulnerable versions: <= 0.3.32
Patched in: unpatched

Summary: Open WebUI Uncontrolled Resource Consumption vulnerability

Details:
In version v0.3.32 of open-webui/open-webui, the application allows users to submit large payloads in the email and password fields during the sign-in process due to the lack of character length validation on these inputs. This vulnerability can lead to a Denial of Service (DoS) condition when a user submits excessively large strings, exhausting server resources such as CPU, memory, and disk space, and rendering the service unavailable for legitimate users. This makes the server susceptible to resource exhaustion attacks without requiring authentication.
GitHub Security Advisory: GHSA-crh6-pj8c-xrhc
Package: open-webui (PIP)
Severity: MODERATE (CVSS 6.5)
CWE: CWE-22: Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')
Vulnerable versions: <= 0.3.8
Patched in: unpatched

Summary: Open WebUI Allows Arbitrary File Write via the `/models/upload` Endpoint

Details:
In open-webui version 0.3.8, the endpoint `/models/upload` is vulnerable to arbitrary file write due to improper handling of user-supplied filenames. The vulnerability arises from the usage of `file_path = f"{UPLOAD_DIR}/{file.filename}"` without proper input validation or sanitization. An attacker can exploit this by manipulating the `file.filename` parameter to include directory traversal sequences, causing the resulting `file_path` to escape the intended `UPLOAD_DIR` and potentially overwrite arbitrary files on the system. This can lead to unauthorized modifications of system binaries, configuration files, or sensitive data, potentially enabling remote command execution.
GitHub Security Advisory: GHSA-pqwr-phvv-v49f
Package: open-webui (PIP)
Severity: HIGH (CVSS 8.3)
CWE: CWE-269: Improper Privilege Management, CWE-863: Incorrect Authorization
Vulnerable versions: <= 0.3.8
Patched in: unpatched

Summary: Open WebUI Allows Admin Deletion via API Endpoint

Details:
In open-webui/open-webui version v0.3.8, there is an improper privilege management vulnerability. The application allows an attacker, acting as an admin, to delete other administrators via the API endpoint `http://0.0.0.0:8080/api/v1/users/{uuid_administrator}`. This action is restricted by the user interface but can be performed through direct API calls.
GitHub Security Advisory: GHSA-chf7-q7m5-fq92
Package: open-webui (PIP)
Severity: HIGH (CVSS 7.5)
CWE: CWE-400: Uncontrolled Resource Consumption, CWE-770: Allocation of Resources Without Limits or Throttling
Vulnerable versions: <= 0.3.32
Patched in: unpatched

Summary: Open WebUI Uncontrolled Resource Consumption vulnerability

Details:
In version 0.3.32 of open-webui/open-webui, the absence of authentication mechanisms allows any unauthenticated attacker to access the `api/v1/utils/code/format` endpoint. If a malicious actor sends a POST request with an excessively high volume of content, the server could become completely unresponsive. This could lead to severe performance issues, causing the server to become unresponsive or experience significant degradation, ultimately resulting in service interruptions for legitimate users.
GitHub Security Advisory: GHSA-c7fq-p62p-wvpc
Package: open-webui (PIP)
Severity: MODERATE (CVSS 4.3)
CWE: CWE-862: Missing Authorization, CWE-1100: Insufficient Isolation of System-Dependent Functions
Vulnerable versions: <= 0.3.8
Patched in: unpatched

Summary: Open WebUI Has Improper Access Control Leading to Arbitrary Prompt Read

Details:
In version v0.3.8 of open-webui/open-webui, improper access control vulnerabilities allow an attacker to view any prompts. The application does not verify whether the attacker is an administrator, allowing the attacker to directly call the /api/v1/prompts/ interface to retrieve all prompt information created by the admin, which includes the ID values. Subsequently, the attacker can exploit the /api/v1/prompts/command/{command_id} interface to obtain arbitrary prompt information.
GitHub Security Advisory: GHSA-j274-m559-cj4j
Package: open-webui (PIP)
Severity: MODERATE (CVSS 6.8)
CWE: CWE-79: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
Vulnerable versions: <= 0.3.8
Patched in: unpatched

Summary: Open WebUI Vulnerable to Cross-Site Scripting (XSS) via Chat File Upload

Details:
A Stored Cross-Site Scripting (XSS) vulnerability exists in the chat file upload functionality of open-webui/open-webui version 0.3.8. An attacker can inject malicious content into a file, which, when accessed by a victim through a URL or shared chat, executes JavaScript in the victim's browser. This can lead to user data theft, session hijacking, malware distribution, and phishing attacks.
GitHub Security Advisory: GHSA-jrhc-9qg9-4qfq
Package: open-webui (PIP)
Severity: HIGH (CVSS 8.1)
CWE: CWE-821: Incorrect Synchronization, CWE-862: Missing Authorization
Vulnerable versions: <= 0.3.8
Patched in: unpatched

Summary: Open WebUI Allows Arbitrary File Reading and Deletion

Details:
An improper access control vulnerability in open-webui/open-webui v0.3.8 allows attackers to view and delete any files. The application does not verify whether the attacker is an administrator, allowing the attacker to directly call the GET /api/v1/files/ interface to retrieve information on all files uploaded by users, which includes the ID values. The attacker can then use the GET /api/v1/files/{file_id} interface to obtain information on any file and the DELETE /api/v1/files/{file_id} interface to delete any file.
GitHub Security Advisory: GHSA-rm69-wvpv-r2w7
Package: kedro (PIP)
Severity: HIGH (CVSS 8.8)
CWE: CWE-20: Improper Input Validation, CWE-94: Improper Control of Generation of Code ('Code Injection'), CWE-829: Inclusion of Functionality from Untrusted Control Sphere
Vulnerable versions: <= 0.19.8
Patched in: unpatched

Summary: Kedro allows Remote Code Execution by Pulling Micro Packages

Details:
In kedro-org/kedro version 0.19.8, the `pull_package()` API function allows users to download and extract micro packages from the Internet. However, the function `project_wheel_metadata()` within the code path can execute the `setup.py` file inside the tar file, leading to remote code execution (RCE) by running arbitrary commands on the victim's machine.
GitHub Security Advisory: GHSA-j9g7-mqhh-9hxf
Package: dbgpt (PIP)
Severity: CRITICAL (CVSS 9.1)
CWE: CWE-22: Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal'), CWE-36: Absolute Path Traversal
Vulnerable versions: < 0.6.2
Patched in: 0.6.2

Summary: DB-GPT Absolute Path Traversal in knowledge/{space_name}/document/upload

Details:
eosphoros-ai/db-gpt version 0.6.0 is vulnerable to an arbitrary file write through the knowledge API. The endpoint for uploading files as 'knowledge' is susceptible to absolute path traversal, allowing attackers to write files to arbitrary locations on the target server. This vulnerability arises because the 'doc_file.filename' parameter is user-controllable, enabling the construction of absolute paths.
GitHub Security Advisory: GHSA-prpg-p95c-32fv
Package: gradio (PIP)
Severity: MODERATE (CVSS 5.3)
CWE: CWE-22: Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal'), CWE-41: Improper Resolution of Path Equivalence
Vulnerable versions: <= 5.0.1
Patched in: unpatched

Summary: Gradio Path Traversal vulnerability

Details:
A vulnerability in the gradio-app/gradio repository, version git 67e4044, allows for path traversal on Windows OS. The implementation of the blocked_path functionality, which is intended to disallow users from reading certain files, is flawed. Specifically, while the application correctly blocks access to paths like 'C:/tmp/secret.txt', it fails to block access when using NTFS Alternate Data Streams (ADS) syntax, such as 'C:/tmp/secret.txt::$DATA'. This flaw can lead to unauthorized reading of blocked file paths.
GitHub Security Advisory: GHSA-m724-hqmc-ggpx
Package: gluoncv (PIP)
Severity: HIGH (CVSS 7.1)
CWE: CWE-20: Improper Input Validation, CWE-22: Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal'), CWE-59: Improper Link Resolution Before File Access ('Link Following')
Vulnerable versions: <= 0.10.0
Patched in: unpatched

Summary: GluonCV Arbitrary File Write via TarSlip

Details:
A vulnerability in the `ImageClassificationDataset.from_csv()` API of the `dmlc/gluon-cv` repository, version 0.10.0, allows for arbitrary file write. The function downloads and extracts `tar.gz` files from URLs without proper sanitization, making it susceptible to a TarSlip vulnerability. Attackers can exploit this by crafting malicious tar files that, when extracted, can overwrite files on the victim's system via path traversal or faked symlinks.
GitHub Security Advisory: GHSA-wxpc-2674-rxvw
Package: feast (PIP)
Severity: HIGH (CVSS 7.4)
CWE: CWE-346: Origin Validation Error
Vulnerable versions: <= 0.40.0
Patched in: unpatched

Summary: Feast Cross-Origin Resource Sharing vulnerability

Details:
A Cross-Origin Resource Sharing (CORS) vulnerability exists in feast-dev/feast version 0.40.0. The CORS configuration on the agentscope server does not properly restrict access to only trusted origins, allowing any external domain to make requests to the API. This can bypass intended security controls and potentially expose sensitive information.
GitHub Security Advisory: GHSA-5vqr-wprc-cpp7
Package: vllm (PIP)
Severity: CRITICAL (CVSS 9.8)
CWE: CWE-502: Deserialization of Untrusted Data
Vulnerable versions: <= 0.6.2
Patched in: unpatched

Summary: vLLM Deserialization of Untrusted Data vulnerability

Details:
vllm-project vllm version v0.6.2 contains a vulnerability in the MessageQueue.dequeue() API function. The function uses pickle.loads to parse received sockets directly, leading to a remote code execution vulnerability. An attacker can exploit this by sending a malicious payload to the MessageQueue, causing the victim's machine to execute arbitrary code.
GitHub Security Advisory: GHSA-5chr-fjjv-38qv
Package: langchain-core (PIP)
Severity: MODERATE (CVSS 5.3)
CWE: CWE-497: Exposure of Sensitive System Information to an Unauthorized Control Sphere
Vulnerable versions: >= 0.3.0, < 0.3.15
Patched in: 0.3.15

Summary: langchain-core allows unauthorized users to read arbitrary files from the host file system

Details:
A vulnerability in langchain-core versions >=0.1.17,<0.1.53, >=0.2.0,<0.2.43, and >=0.3.0,<0.3.15 allows unauthorized users to read arbitrary files from the host file system. The issue arises from the ability to create langchain_core.prompts.ImagePromptTemplate's (and by extension langchain_core.prompts.ChatPromptTemplate's) with input variables that can read any user-specified path from the server file system. If the outputs of these prompt templates are exposed to the user, either directly or through downstream model outputs, it can lead to the exposure of sensitive information.
GitHub Security Advisory: GHSA-5chr-fjjv-38qv
Package: langchain-core (PIP)
Severity: MODERATE (CVSS 5.3)
CWE: CWE-497: Exposure of Sensitive System Information to an Unauthorized Control Sphere
Vulnerable versions: >= 0.2.0, < 0.2.43
Patched in: 0.2.43

Summary: langchain-core allows unauthorized users to read arbitrary files from the host file system

Details:
A vulnerability in langchain-core versions >=0.1.17,<0.1.53, >=0.2.0,<0.2.43, and >=0.3.0,<0.3.15 allows unauthorized users to read arbitrary files from the host file system. The issue arises from the ability to create langchain_core.prompts.ImagePromptTemplate's (and by extension langchain_core.prompts.ChatPromptTemplate's) with input variables that can read any user-specified path from the server file system. If the outputs of these prompt templates are exposed to the user, either directly or through downstream model outputs, it can lead to the exposure of sensitive information.
GitHub Security Advisory: GHSA-5chr-fjjv-38qv
Package: langchain-core (PIP)
Severity: MODERATE (CVSS 5.3)
CWE: CWE-497: Exposure of Sensitive System Information to an Unauthorized Control Sphere
Vulnerable versions: >= 0.1.17, < 0.1.53
Patched in: 0.1.53

Summary: langchain-core allows unauthorized users to read arbitrary files from the host file system

Details:
A vulnerability in langchain-core versions >=0.1.17,<0.1.53, >=0.2.0,<0.2.43, and >=0.3.0,<0.3.15 allows unauthorized users to read arbitrary files from the host file system. The issue arises from the ability to create langchain_core.prompts.ImagePromptTemplate's (and by extension langchain_core.prompts.ChatPromptTemplate's) with input variables that can read any user-specified path from the server file system. If the outputs of these prompt templates are exposed to the user, either directly or through downstream model outputs, it can lead to the exposure of sensitive information.
GitHub Security Advisory: GHSA-g44m-hpf4-vmrp
Package: fschat (PIP)
Severity: HIGH (CVSS 7.5)
CWE: CWE-918: Server-Side Request Forgery (SSRF)
Vulnerable versions: <= 0.2.36
Patched in: unpatched

Summary: FastChat Server-Side Request Forgery vulnerability

Details:
A Server-Side Request Forgery (SSRF) vulnerability was identified in the lm-sys/fastchat web server, specifically in the affected version git 2c68a13. This vulnerability allows an attacker to access internal server resources and data that are otherwise inaccessible, such as AWS metadata credentials.
GitHub Security Advisory: GHSA-h254-g997-685c
Package: fschat (PIP)
Severity: HIGH (CVSS 7.5)
CWE: CWE-918: Server-Side Request Forgery (SSRF)
Vulnerable versions: <= 0.2.36
Patched in: unpatched

Summary: FastChat Server-Side Request Forgery vulnerability

Details:
A Server-Side Request Forgery (SSRF) vulnerability exists in lm-sys/fastchat version 0.2.36. The vulnerability is present in the `/queue/join?` endpoint, where insufficient validation of the path parameter allows an attacker to send crafted requests. This can lead to unauthorized access to internal networks or the AWS metadata endpoint, potentially exposing sensitive data and compromising internal servers.
GitHub Security Advisory: GHSA-qg86-f892-m4hj
Package: fschat (PIP)
Severity: HIGH (CVSS 7.5)
CWE: CWE-400: Uncontrolled Resource Consumption, CWE-835: Loop with Unreachable Exit Condition ('Infinite Loop')
Vulnerable versions: <= 0.2.36
Patched in: unpatched

Summary: FastChat Uncontrolled Resource Consumption vulnerability

Details:
In lm-sys/fastchat Release v0.2.36, the server fails to handle excessive characters appended to the end of multipart boundaries. This flaw can be exploited by sending malformed multipart requests with arbitrary characters at the end of the boundary. Each extra character is processed in an infinite loop, leading to excessive resource consumption and a complete denial of service (DoS) for all users. The vulnerability is unauthenticated, meaning no user login or interaction is required for an attacker to exploit this issue.
GitHub Security Advisory: GHSA-77cj-rv5x-v6r2
Package: fschat (PIP)
Severity: MODERATE (CVSS 6.1)
CWE: CWE-601: URL Redirection to Untrusted Site ('Open Redirect')
Vulnerable versions: <= 0.2.36
Patched in: unpatched

Summary: FastChat open redirect vulnerability

Details:
An open redirect vulnerability in lm-sys/fastchat Release v0.2.36 allows a remote unauthenticated attacker to redirect users to arbitrary websites via a specially crafted URL. This can be exploited for phishing attacks, malware distribution, and credential theft.
GitHub Security Advisory: GHSA-79rp-v9rm-gxm8
Package: fschat (PIP)
Severity: HIGH (CVSS 7.5)
CWE: CWE-400: Uncontrolled Resource Consumption
Vulnerable versions: <= 0.2.36
Patched in: unpatched

Summary: FastChat Denial of Service vulnerability

Details:
A Denial of Service (DoS) vulnerability exists in the file upload feature of lm-sys/fastchat version 0.2.36. The vulnerability is due to improper handling of form-data with a large filename in the file upload request. An attacker can exploit this by sending a payload with an excessively large filename, causing the server to become overwhelmed and unavailable to legitimate users.
GitHub Security Advisory: GHSA-227r-w5j2-6243
Package: InvokeAI (PIP)
Severity: CRITICAL (CVSS 9.1)
CWE: CWE-20: Improper Input Validation, CWE-22: Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal'), CWE-73: External Control of File Name or Path
Vulnerable versions: < 5.3.0rc1
Patched in: 5.3.0rc1

Summary: InvokeAI Arbitrary File Deletion vulnerability

Details:
In invoke-ai/invokeai version v5.0.2, the web API `POST /api/v1/images/delete` is vulnerable to Arbitrary File Deletion. This vulnerability allows unauthorized attackers to delete arbitrary files on the server, potentially including critical or sensitive system files such as SSH keys, SQLite databases, and configuration files. This can impact the integrity and availability of applications relying on these files.
GitHub Security Advisory: GHSA-ffh5-w482-c7m5
Package: InvokeAI (PIP)
Severity: HIGH (CVSS 7.5)
CWE: CWE-400: Uncontrolled Resource Consumption
Vulnerable versions: <= 5.0.2
Patched in: unpatched

Summary: InvokeAI Uncontrolled Resource Consumption vulnerability

Details:
A Denial of Service (DoS) vulnerability was discovered in the /api/v1/boards/{board_id} endpoint of invoke-ai/invokeai version v5.0.2. This vulnerability occurs when an excessively large payload is sent in the board_name field during a PATCH request. By sending a large payload, the UI becomes unresponsive, rendering it impossible for users to interact with or manage the affected board. Additionally, the option to delete the board becomes inaccessible, amplifying the severity of the issue.
GitHub Security Advisory: GHSA-6f6x-f56q-5xgv
Package: InvokeAI (PIP)
Severity: HIGH (CVSS 7.5)
CWE: CWE-400: Uncontrolled Resource Consumption, CWE-835: Loop with Unreachable Exit Condition ('Infinite Loop')
Vulnerable versions: <= 5.0.2
Patched in: unpatched

Summary: InvokeAI has Denial of Service (DoS) vulnerability in `/api/v1/images/upload`

Details:
A Denial of Service (DoS) vulnerability in the multipart request boundary processing mechanism of the Invoke-AI server (version v5.0.1) allows unauthenticated attackers to cause excessive resource consumption. The server fails to handle excessive characters appended to the end of multipart boundaries, leading to an infinite loop and a complete denial of service for all users. The affected endpoint is `/api/v1/images/upload`.
GitHub Security Advisory: GHSA-8pwp-phcg-h36g
Package: dbgpt (PIP)
Severity: HIGH (CVSS 8.2)
CWE: CWE-22: Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')
Vulnerable versions: <= 0.6.0
Patched in: unpatched

Summary: DB-GPT Path Traversal vulnerability

Details:
A Path Traversal vulnerability exists in the eosphoros-ai/db-gpt version 0.6.0 at the API endpoint `/v1/resource/file/delete`. This vulnerability allows an attacker to delete any file on the server by manipulating the `file_key` parameter. The `file_key` parameter is not properly sanitized, enabling an attacker to specify arbitrary file paths. If the specified file exists, the application will delete it.
GitHub Security Advisory: GHSA-6xgj-c5fx-5v57
Package: dbgpt (PIP)
Severity: HIGH (CVSS 7.5)
CWE: CWE-400: Uncontrolled Resource Consumption, CWE-835: Loop with Unreachable Exit Condition ('Infinite Loop')
Vulnerable versions: <= 0.6.0
Patched in: unpatched

Summary: DB-GPT Uncontrolled Resource Consumption vulnerability

Details:
A Denial of Service (DoS) vulnerability in the multipart request boundary processing mechanism of eosphoros-ai/db-gpt v0.6.0 allows unauthenticated attackers to cause excessive resource consumption. The server fails to handle excessive characters appended to the end of multipart boundaries, leading to an infinite loop and complete denial of service for all users. This vulnerability affects all endpoints processing multipart/form-data requests.
GitHub Security Advisory: GHSA-3248-f932-c76p
Package: dbgpt (PIP)
Severity: HIGH (CVSS 7.1)
CWE: CWE-352: Cross-Site Request Forgery (CSRF)
Vulnerable versions: <= 0.6.0
Patched in: unpatched

Summary: DB-GPT vulnerable to Cross-Site Request Forgery

Details:
In version 0.6.0 of eosphoros-ai/db-gpt, the `uvicorn` app created by `dbgpt_server` uses an overly permissive instance of `CORSMiddleware` which sets the `Access-Control-Allow-Origin` to `*` for all requests. This configuration makes all endpoints exposed by the server vulnerable to Cross-Site Request Forgery (CSRF). An attacker can exploit this vulnerability to interact with any endpoints of the instance, even if the instance is not publicly exposed to the network.
GitHub Security Advisory: GHSA-3xq5-x4fj-rff7
Package: dbgpt (PIP)
Severity: CRITICAL (CVSS 9.1)
CWE: CWE-22: Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal'), CWE-73: External Control of File Name or Path
Vulnerable versions: <= 0.6.0
Patched in: unpatched

Summary: DB-GPT vulnerable to Arbitrary File Upload with Path Traversal

Details:
In eosphoros-ai/db-gpt version v0.6.0, the web API `POST /v1/personal/agent/upload` is vulnerable to Arbitrary File Upload with Path Traversal. This vulnerability allows unauthorized attackers to upload arbitrary files to the victim's file system at any location. The impact of this vulnerability includes the potential for remote code execution (RCE) by writing malicious files, such as a malicious `__init__.py` in the Python's `/site-packages/` directory.
GitHub Security Advisory: GHSA-hhw5-29f6-hf4x
Package: dbgpt (PIP)
Severity: CRITICAL (CVSS 9.1)
CWE: CWE-36: Absolute Path Traversal
Vulnerable versions: <= 0.6.0
Patched in: unpatched

Summary: DB-GPT Absolute Path Traversal vulnerability

Details:
In eosphoros-ai/db-gpt version 0.6.0, the endpoint for uploading files is vulnerable to absolute path traversal. This vulnerability allows an attacker to upload arbitrary files to arbitrary locations on the target server. The issue arises because the `file_key` and `doc_file.filename` parameters are user-controllable, enabling the construction of paths outside the intended directory. This can lead to overwriting essential system files, such as SSH keys, for further exploitation.
GitHub Security Advisory: GHSA-7gj6-22m4-qfhx
Package: dbgpt (PIP)
Severity: CRITICAL (CVSS 9.1)
CWE: CWE-89: Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection'), CWE-434: Unrestricted Upload of File with Dangerous Type
Vulnerable versions: <= 0.6.3
Patched in: unpatched

Summary: DB-GPT Arbitrary File Write vulnerability

Details:
In eosphoros-ai/db-gpt version v0.6.3 and earlier, the web API `POST /api/v1/editor/chart/run` allows execution of arbitrary SQL queries without any access control. This vulnerability can be exploited by attackers to perform Arbitrary File Write, enabling them to write arbitrary files to the victim's file system. This can potentially lead to Remote Code Execution (RCE) by writing malicious files such as `__init__.py` in the Python's `/site-packages/` directory.
GitHub Security Advisory: GHSA-cg4p-5qfm-pjjj
Package: hyperlpr3 (PIP)
Severity: HIGH (CVSS 7.5)
CWE: CWE-400: Uncontrolled Resource Consumption, CWE-770: Allocation of Resources Without Limits or Throttling
Vulnerable versions: <= 3.0
Patched in: unpatched

Summary: HyperLPR Denial of Service vulnerability

Details:
A vulnerability in szad670401/hyperlpr v3.0 allows for a Denial of Service (DoS) attack. The server fails to handle excessive characters appended to the end of multipart boundaries, regardless of the character used. This flaw can be exploited by sending malformed multipart requests with arbitrary characters at the end of the boundary, leading to excessive resource consumption and a complete denial of service for all users. The vulnerability is unauthenticated, meaning no user login or interaction is required for an attacker to exploit this issue.