{"action":"No fix published. Pin and monitor.","affected":[{"introduced":"0","last_affected":"20240410"}],"component":"chuanhuchatgpt","cve_ids":["CVE-2024-5822"],"ecosystem":"PyPI","epss":0.00523,"exploited":false,"fixed_versions":[],"id":"tcs_01M5KGMV6YPTVQ38VVSV577ZPE","modified_at":"2026-05-21T15:00:06.579848064Z","published_at":"2024-06-27T19:15:16.880Z","references":["https://osv.dev/vulnerability/PYSEC-2024-268","https://huntr.com/bounties/b24f1b5f-a529-435b-ac4d-5ca71d5d1fb5"],"severity":{"label":"critical","score":9.8},"sources":[{"source":"osv","source_id":"PYSEC-2024-268","url":"https://osv.dev/vulnerability/PYSEC-2024-268"}],"summary":"A Server-Side Request Forgery (SSRF) vulnerability exists in the upload processing interface of gaizhenbiao/ChuanhuChatGPT versions <= ChuanhuChatGPT-20240410-git.zip. This vulnerability allows attack"}