{"action":"No fix published. Pin and monitor.","affected":[{"introduced":"0","last_affected":"20240914"}],"component":"chuanhuchatgpt","cve_ids":["CVE-2025-0191"],"ecosystem":"PyPI","epss":0.00603,"exploited":false,"fixed_versions":[],"id":"tcs_01M5KGQ05Y666CN94SDH6PSQ3A","modified_at":"2026-05-21T15:00:08.315657773Z","published_at":"2025-03-20T10:15:51.907Z","references":["https://osv.dev/vulnerability/PYSEC-2025-99","https://huntr.com/bounties/c89a1dfd-a733-41b3-af20-6ef6024361eb"],"severity":{"label":"medium","score":6.5},"sources":[{"source":"osv","source_id":"PYSEC-2025-99","url":"https://osv.dev/vulnerability/PYSEC-2025-99"}],"summary":"A Denial of Service (DoS) vulnerability exists in the file upload feature of gaizhenbiao/chuanhuchatgpt version 20240914. The vulnerability is due to improper handling of form-data with a large filena"}