{"action":"No fix published. Pin and monitor.","affected":[{"introduced":"0"}],"component":"chuanhuchatgpt","cve_ids":["CVE-2024-7807"],"ecosystem":"PyPI","epss":0.0063,"exploited":false,"fixed_versions":[],"id":"tcs_01M5KGKZ4B6R4J28AQGBEVHAXH","modified_at":"2024-11-04T22:57:18.936935Z","published_at":"2024-10-29T13:15:00Z","references":["https://osv.dev/vulnerability/PYSEC-2024-119","https://huntr.com/bounties/db67276d-36ee-4487-9165-b621c67ef8a3","https://github.com/gaizhenbiao/chuanhuchatgpt/commit/919222d285d73b9dcd71fb34de379eef8c90d175"],"severity":{"label":"high","score":7.5},"sources":[{"source":"osv","source_id":"PYSEC-2024-119","url":"https://osv.dev/vulnerability/PYSEC-2024-119"}],"summary":"A vulnerability in gaizhenbiao/chuanhuchatgpt version 20240628 allows for a Denial of Service (DOS) attack. When uploading a file, if an attacker appends a large number of characters to the end of a m"}