PyPI/openchatbi CVE-2026-28795: critical 9.8, EPSS 0.46%
OpenChatBI has a Path Traversal Vulnerability in save_report Tool
Action: Upgrade openchatbi to 0.2.2 or later.
pip install openchatbi==0.2.2Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | 0.2.2 | - |
Fixed versions
| 0.2.2 |
Sources
- osv: GHSA-vmwq-8g8c-jm79
- nvd: CVE-2026-28795
- https://github.com/zhongyu09/openchatbi/security/advisories/GHSA-vmwq-8g8c-jm79
- https://github.com/zhongyu09/openchatbi/issues/10
- https://github.com/zhongyu09/openchatbi/pull/12
- https://github.com/zhongyu09/openchatbi/commit/372a7e861da5159c3106d64d6f6edf8284db8c75
- https://github.com/zhongyu09/openchatbi
CVE-2026-28795 · published · modified · JSON