CVE-2024-10835
2 advisories.
PyPI/dbgpt CVE-2024-10835: critical 9.1
DB-GPT is vulnerable to SQL Injection attacks from unauthenticated users
Action: Upgrade dbgpt to 0.7.1 or later.
pip install dbgpt==0.7.1Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | 0.7.1 | - |
Fixed versions
| 0.7.1 |
Sources
- osv: GHSA-qccg-9m4q-xfm6
- https://nvd.nist.gov/vuln/detail/CVE-2024-10835
- https://github.com/eosphoros-ai/DB-GPT/pull/2650
- https://github.com/eosphoros-ai/DB-GPT
- https://github.com/eosphoros-ai/DB-GPT/releases/tag/v0.7.1
- https://huntr.com/bounties/e32fda74-ca83-431c-8de8-08274ba686c9
CVE-2024-10835 · published · modified · JSON
PyPI/dbgpt CVE-2024-10835: critical 9.1
DB-GPT is vulnerable to SQL Injection attacks from unauthenticated users
Action: Upgrade dbgpt to 0.7.1 or later.
pip install dbgpt==0.7.1Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | 0.7.1 | - |
Fixed versions
| 0.7.1 |
Sources
- osv: PYSEC-2026-325
- https://nvd.nist.gov/vuln/detail/CVE-2024-10835
- https://github.com/eosphoros-ai/DB-GPT/pull/2650
- https://github.com/eosphoros-ai/DB-GPT
- https://github.com/eosphoros-ai/DB-GPT/releases/tag/v0.7.1
- https://huntr.com/bounties/e32fda74-ca83-431c-8de8-08274ba686c9
- https://pypi.org/project/dbgpt
- https://github.com/advisories/GHSA-qccg-9m4q-xfm6
CVE-2024-10835 · published · modified · JSON