repository icon
binary-husky / gpt_academic Project repository

为GPT/GLM等LLM大语言模型提供实用化交互接口，特别优化论文阅读/润色/写作体验，模块化设计，支持自定义快捷按钮&函数插件，支持Python和C++等项目剖析&自译解功能，PDF/LaTex论文翻译&总结功能，支持并行问询多种LLM模型，支持chatglm3等本地模型。接入通义千问, deepseekcoder, 讯飞星火, 文心一言, llama2, rwkv, claude2, moss等。

Submit a report

FIRST INTERACTION

WITHINN/A DAYS

REVIEW

WITHIN30 DAYS

FIX

WITHIN97 DAYS

gpt_academic has RCE
h3rrr
duplicate
High
Arbitrary File Write via Symlink Attack in TAR Extraction Function
j0x1nx
self closed
Note python project functions are at risk of being poisoned
tobetestone
pending
XSS in the "Mermaid" plugin of binary-husky/gpt_academic
glmgbj233
pending
Bypass of Block List Function Leading to Path Traversal in /file=, Allowing Unau...
3m0oo0ry
duplicate
High
Arbitrary file write through function write_history_to_file
sdashy1912
informative
Critical
Server-Side Request Forgery
sdashy1912
informative
High
Error handling leads to JavaScript code execution
sdashy1912
informative
Medium
SSRF Vulnerabilities found in Modules Utils `get_files_from_everything`
jackfromeast
duplicate
Medium
Cross-site WebSocket/Request Forgery Leading to Arbitrary Backend API Usage
jackfromeast
duplicate
Critical
Remote Code Execution via the Codeinterpreter module
jackfromeast
duplicate
Critical
(Blind) Stored XSS through the debug_log.html generated by the Latex Proof-Readi...
jackfromeast
Medium
•CVE-2025-0183
History chat files save leads to Cross-site Scripting Stored
razzhunter
pending
Remote Code Execution via Jailbreaking in Math Animation Generation with Manim
jackfromeast
duplicate
Critical
Overwrite log file
razzhunter
spam
Log file was created by user can download from other user.
razzhunter
informative
Medium
Remote Code Execution via Pickle Deserialization Filter Bypass in latex_fns
jackfromeast
duplicate
Critical
XSS stored on PDF upload
razzhunter
duplicate
Medium
Upload Archive files with file name with javascript code injected to DOM
sdashy1912
informative
High
Zip bomb
sdashy1912
duplicate
High
LFI through /file= parameter and path bypass in binary-husky/gpt_academic
eggdkk
duplicate
High
Open Redirect
sdashy1912
duplicate
Medium
Cross-site request forgery leads to Cross-site Scripting Store
sdashy1912
duplicate
High
Open Redirect
tonghuaroot
duplicate
None
Arbitrary file read vulnerability bypass
tonghuaroot
duplicate
High
Infinite loop lead to denial of service
oicu0619
informative
High
URL check not complete, lead to SSRF
oicu0619
Medium
•$50•CVE-2024-12392
Running user provided regular expression, lead to DOS
oicu0619
Medium
•$50•CVE-2024-12391
arbitrary file read by "解析任意code项目" functionality
oicu0619
duplicate
High
7z slip lead to remote code execution
oicu0619
High
•$300•CVE-2024-12389
rar slip lead to remote code execution
oicu0619
High
•$300•CVE-2024-12390
Redos (Regular Expression Denial of Service)
oicu0619
Medium
•$50•CVE-2024-12388
Path traversal in username
ngockhanhc311
duplicate
Medium
server crash by zip bomb
oicu0619
Medium
•$300•CVE-2024-12387
Remote code execution via code interpreter
oicu0619
duplicate
Critical
Local file inclusion via tar file extraction with symlink
oicu0619
duplicate
Critical
Server Side Request Forgery
oicu0619
duplicate
High
upload SVG XSS
ngockhanhc311
not applicable
gpt_academic has an arbitrary file read vulnerability during the upload process
qhaoduoyu
duplicate
High
pickle deserialization vulnerability
qhaoduoyu
High
•$300•CVE-2024-11039
bypass blocked_paths protection and read API_KEY from config.py
oicu0619
Medium
•$50•CVE-2024-11037
Local file inclusion
oicu0619
duplicate
High
Denial of service
oicu0619
duplicate
High
Open redirect
oicu0619
duplicate
None
Stored XSS
oicu0619
duplicate
Medium
Arbitrary File Write
ngockhanhc311
duplicate
High
DoS by Sending Large Filename at File Upload Endpoint
mnqazi
Medium
•$50•CVE-2024-11033
SSRF via the 7th Entry Point Vulnerable from get_files_from_everything() API
zpbrent
duplicate
High
Local File Read (LFI) via toolbox.on_file_uploaded() API
zpbrent
duplicate
High
SSRF via The Third Entry Point API from Markdown_Translate
zpbrent
duplicate
High
SSRF via Another Markdown_Translate Entry Point API
zpbrent
duplicate
High
SSRF via crazy_functions.PDF_Translate(NOUGAT) Entry Point
zpbrent
duplicate
High
SSRF via crazy_functions.PDF_Translate Entry Point
zpbrent
duplicate
High
SSRF via Markdown_Translate.get_files_from_everything() API
zpbrent
High
•$300•CVE-2024-11031
SSRF via get_files_from_everything() API
zpbrent
High
•$300•CVE-2024-11030
Local File Read (LFI) by Tarslip Symlink via arxiv_download() API
zpbrent
High
•$300•CVE-2024-10986
Cross-Site WebSocket Hijacking in GPT Academy
mnqazi
High
•$300•CVE-2024-10956
Path Traversal Causes Arbitrary Upload (RCE)
dtai261
informative
High
DOS in multipart boundry while uploading a file
dtai261
duplicate
High
Local File Inclusion
mnqazi
duplicate
High
Prompt injection lead to RCE in plugin `manim`
lyutoon
High
•$300•CVE-2024-10954
Prompt injection lead to RCE in plugin `CodeInterpreter`
lyutoon
High
•$300•CVE-2024-10950
Arbitrary File read via Upload function
dtai261
Medium
•$50•CVE-2024-10948
Local File inclusion in gpt_academic
vinit989
not applicable
Self-XSS Vulnerability in User Prompt Leading to Potential Session Hijacking
vinit989
informative
Low
Stored XSS through file upload which can be shared through /file
ethansilvas
Medium
•CVE-2024-10101
LFI through /file= parameter and URL encoding
ethansilvas
Medium
•CVE-2024-10100
Path Traversal in /file= path
dtai261
duplicate
High
CSRF to XSS
srivallikusumba
High
•$300•CVE-2024-10819
Open redirect in file parameter
srivallikusumba
Medium
•$50•CVE-2024-10812
Denial of Service in multipart/form-data while uploading a file
srivallikusumba
High
•$300•CVE-2024-10714