{"action":"No fix published. Pin and monitor.","affected":[{"introduced":"0","last_affected":"2024-12-04"}],"component":"chuanhuchatgpt","cve_ids":["CVE-2024-9216"],"ecosystem":"PyPI","epss":0.00628,"exploited":false,"fixed_versions":[],"id":"tcs_01M5KGPZWTFATCX7C3EGZA5PXA","modified_at":"2026-05-21T15:00:08.151294348Z","published_at":"2025-03-20T10:15:47.477Z","references":["https://osv.dev/vulnerability/PYSEC-2025-97","https://huntr.com/bounties/21e54c3f-e2d7-423b-9890-1f0cb99af4dd"],"severity":{"label":"high","score":8.1},"sources":[{"source":"osv","source_id":"PYSEC-2025-97","url":"https://osv.dev/vulnerability/PYSEC-2025-97"}],"summary":"An authentication bypass vulnerability exists in gaizhenbiao/ChuanhuChatGPT, as of commit 3856d4f, allowing any user to read and delete other users' chat history. The vulnerability arises because the"}