astrbot Security Advisories - Pypi | Ecosyste.ms: Advisories

astrbot

Easy-to-use multi-platform LLM chatbot and development framework

View on github.com · View on pypi.org

Security Advisories for astrbot in pypi

Critical

3 days ago

AstrBot is vulnerable to RCE with hard-coded JWT signing keys GSA_kwCzR0hTQS00bTMyLWNqdjctZjQyNc4ABOkI

pypi astrbot

Moderate

10 days ago

AstrBot has an arbitrary file read vulnerability in function _encode_image_bs64 GSA_kwCzR0hTQS12bTJmLTQ2eGMtNWpjM84ABOUi

pypi AstrBot

High

10 days ago

AstrBot contains a directory traversal vulnerability GSA_kwCzR0hTQS14cmo5LW13NTctajM0ds4ABOUZ

pypi AstrBot

High

6 months ago

AstrBot Has Path Traversal Vulnerability in /api/chat/get_file GSA_kwCzR0hTQS1jcTM3LWcycXAtM2MycM4ABIpf

pypi astrbot

Filter by Severity

High 2 Moderate 1 Critical 1