{"action":"No fix published. Pin and monitor.","affected":[{"introduced":"0","last_affected":"2024-12-04"}],"component":"chuanhuchatgpt","cve_ids":["CVE-2024-9159"],"ecosystem":"PyPI","epss":0.0065,"exploited":false,"fixed_versions":[],"id":"tcs_01M5KGPZQSXA8BMG7F3NYDKRFC","modified_at":"2026-05-21T15:00:08.121129729Z","published_at":"2025-03-20T10:15:47.353Z","references":["https://osv.dev/vulnerability/PYSEC-2025-96","https://huntr.com/bounties/ab0f8fbb-c17a-45a7-8dab-7d4c8b90490a"],"severity":{"label":"medium","score":6.5},"sources":[{"source":"osv","source_id":"PYSEC-2025-96","url":"https://osv.dev/vulnerability/PYSEC-2025-96"}],"summary":"An incorrect authorization vulnerability exists in gaizhenbiao/chuanhuchatgpt version git c91dbfc. The vulnerability allows any user to restart the server at will, leading to a complete loss of availa"}