CVE-2024-6038
1 advisory.
PyPI/chuanhuchatgpt CVE-2024-6038: high 7.5, EPSS 0.66%
A Regular Expression Denial of Service (ReDoS) vulnerability exists in the latest version of gaizhenbiao/chuanhuchatgpt. The vulnerability is located in the filter_history function within the utils.py
Action: No fix published. Pin and monitor.
Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | - | 20240410 |
Fixed versions
No fixed version in the source.
Sources
- osv: PYSEC-2024-318
- https://github.com/gaizhenbiao/chuanhuchatgpt/commit/fcdd5fd6b05ef537a1db185ab115758d87e1ba3f
- https://huntr.com/bounties/d41cca0a-82bc-4cbf-a52a-928d304fb42d
CVE-2024-6038 · published · modified · JSON