{"action":"No fix published. Pin and monitor.","affected":[{"introduced":"0","last_affected":"20240410"}],"component":"chuanhuchatgpt","cve_ids":["CVE-2024-6037"],"ecosystem":"PyPI","epss":0.10693,"exploited":false,"fixed_versions":[],"id":"tcs_01M5KGN406N15PV76EN96QV7N1","modified_at":"2026-07-13T07:15:20.087908871Z","published_at":"2024-07-10T23:15:14.493Z","references":["https://osv.dev/vulnerability/PYSEC-2024-317","https://github.com/gaizhenbiao/chuanhuchatgpt/commit/71cb89c4c948dae5aaa0ae64b98f98e3965bdb37","https://huntr.com/bounties/eca6904f-f9fd-40c8-9e85-96f54daf405e"],"severity":{"label":"critical","score":9.1},"sources":[{"source":"osv","source_id":"PYSEC-2024-317","url":"https://osv.dev/vulnerability/PYSEC-2024-317"}],"summary":"A vulnerability in gaizhenbiao/chuanhuchatgpt version 20240410 allows an attacker to create arbitrary folders at any location on the server, including the root directory (C: dir). This can lead to unc"}