Browse CVEs

MEDIUM 6.5 CVE-2025-4515 A vulnerability, which was classified as problematic, was found in Zylon PrivateGPT up to 0.6.2. This affects an unknown part of the file settings.ya… Privategpt after 0.6.2 Fix from $1,6002025-05-10 MEDIUM 6.1 CVE-2024-8029 An XSS vulnerability was discovered in the upload file(s) process of imartinez/privategpt v0.5.0. Attackers can upload malicious SVG files, which exe… Privategpt No fix yet Fix from $1,6002025-03-20 HIGH 7.5 CVE-2024-8018 A vulnerability in imartinez/privategpt version 0.5.0 allows for a Denial of Service (DOS) attack. When uploading a file, if an attacker appends a la… Privategpt No fix yet Fix from $1,9502025-03-20 HIGH 7.5 CVE-2024-12063 A Denial of Service (DoS) vulnerability exists in the file upload feature of imartinez/privategpt version v0.6.2. The vulnerability is due to imprope… Privategpt No fix yet Fix from $1,9502025-03-20 CRITICAL 9.8 CVE-2024-4343 A Python command injection vulnerability exists in the `SagemakerLLM` class's `complete()` method within `./private_gpt/components/llm/custom/sagemak… Privategpt 0.6.0+ Fix from $2,3002024-11-14 MEDIUM 6.1 CVE-2024-5936EPSS 29% An open redirect vulnerability exists in imartinez/privategpt version 0.5.0 due to improper handling of the 'file' parameter. This vulnerability allo… Privategpt No fix yet Fix from $1,6002024-06-27 MEDIUM 5.4 CVE-2024-5935 A Cross-Site Request Forgery (CSRF) vulnerability in version 0.5.0 of imartinez/privategpt allows an attacker to delete all uploaded files on the ser… Privategpt No fix yet Fix from $1,6002024-06-27 HIGH 7.2 CVE-2024-5186 A Server-Side Request Forgery (SSRF) vulnerability exists in the file upload section of imartinez/privategpt version 0.5.0. This vulnerability allows… Privategpt No fix yet Fix from $1,9502024-06-06 HIGH 7.5 CVE-2024-3403 imartinez/privategpt version 0.2.0 is vulnerable to a local file inclusion vulnerability that allows attackers to read arbitrary files from the files… Privategpt 0.6.0+ Fix from $1,9502024-05-16 MEDIUM 5.4 CVE-2024-3851 A stored Cross-Site Scripting (XSS) vulnerability exists in the 'imartinez/privategpt' repository due to improper validation of file uploads. Attacke… Privategpt after 0.6.2 Fix from $1,6002024-05-16