{"action":"No fix published. Pin and monitor.","affected":[{"introduced":"0","last_affected":"20240410"}],"component":"chuanhuchatgpt","cve_ids":["CVE-2024-6090"],"ecosystem":"PyPI","epss":0.00859,"exploited":false,"fixed_versions":[],"id":"tcs_01M5KGN4AMF2FATS9KYX2HHPK3","modified_at":"2026-07-13T07:15:21.771854882Z","published_at":"2024-06-27T19:15:19.777Z","references":["https://osv.dev/vulnerability/PYSEC-2024-319","https://github.com/gaizhenbiao/chuanhuchatgpt/commit/526c615c437377ee9c71f866fd0f19011910f705","https://huntr.com/bounties/bd0f8f89-5c8a-4662-89aa-a6861d84cf4c"],"severity":{"label":"high","score":7.5},"sources":[{"source":"osv","source_id":"PYSEC-2024-319","url":"https://osv.dev/vulnerability/PYSEC-2024-319"}],"summary":"A path traversal vulnerability exists in gaizhenbiao/chuanhuchatgpt version 20240410, allowing any user to delete other users' chat histories. This vulnerability can also be exploited to delete any fi"}