Data

Tools

Indexes

Applications

Experiments

Advisories

An open API service providing security vulnerability metadata for many open source software ecosystems.

pypi

AstrBot

pypi

Easy-to-use multi-platform LLM chatbot and development framework

View on github.com · View on pypi.org

Security Advisories for AstrBot in pypi

Low
3 months ago

AstrBot: Manipulation of astr_main_agent's session_id parameter leads to authorization bypass GSA_kwCzR0hTQS1yNnZtLTR4d2ctdzY5aM4ABX2Q

pypi AstrBot
Low
3 months ago

AstrBot: File upload vulnerability in the function post_file of the file astrbot/dashboard/routes/chat.py GSA_kwCzR0hTQS1mNjNoLXdjMjYtcG12Y84ABW_K

pypi AstrBot
Moderate
4 months ago

AstrBot Makes Use of Hard-coded Password GSA_kwCzR0hTQS1tcTlxLTI1aG0tZzRncM4ABWAI

pypi AstrBot
Low
4 months ago

AstrBot has Incomplete Filtering of Special Elements GSA_kwCzR0hTQS1oM3JyLTl3cWotdjNjNs4ABVxo

pypi AstrBot
Critical
9 months ago

AstrBot is vulnerable to RCE with hard-coded JWT signing keys GSA_kwCzR0hTQS00bTMyLWNqdjctZjQyNc4ABOkI

pypi astrbot
Moderate
9 months ago

AstrBot has an arbitrary file read vulnerability in function _encode_image_bs64 GSA_kwCzR0hTQS12bTJmLTQ2eGMtNWpjM84ABOUi

pypi AstrBot
High
9 months ago

AstrBot contains a directory traversal vulnerability GSA_kwCzR0hTQS14cmo5LW13NTctajM0ds4ABOUZ

pypi AstrBot
High
about 1 year ago

AstrBot Has Path Traversal Vulnerability in /api/chat/get_file GSA_kwCzR0hTQS1jcTM3LWcycXAtM2MycM4ABIpf

pypi astrbot

Filter by Severity

Low 3 Moderate 2 High 2 Critical 1