repository icon
geekan / metagpt Project repository

🌟 The Multi-Agent Framework: First AI Software Company, Towards Natural Language Programming

Submit a report

FIRST INTERACTION

WITHINN/A DAYS

REVIEW

WITHIN35 DAYS

FIX

WITHINN/A DAYS

Unsafe eval() on LLM Output in action_node.py Enables Remote Code Execution via...
mom3gool2030
duplicate
None
The Programmer component contains a remote code execution vulnerability that can...
ka7arotto
duplicate
Critical
MetaGPT Has Blacklist bypass RCE
to-be-w1th0ut
pending
metagpt Has Unsafe Dynamic Function Invocation
to-be-w1th0ut
pending
MetaGPT has a path traversal vulnerability
to-be-w1th0ut
pending
MetaGPT has exec() for remote code execution (via web UI)
to-be-w1th0ut
pending
MetaGPT has eval() remote code execution
to-be-w1th0ut
pending
Remote Code Execution (RCE) via insecure eval() in ActionNode.xml_fill
0xamino
pending
Insecure Use of `pull_request_target` with Untrusted PR Checkout in GitHub Actio...
arunstar
informative
Critical
Command injection in rebuild_class_views
zhcy2018
informative
High
Zipslip when parsing invoice zip file via InvoiceOCRAssistant
sunrisexu
informative
High
Command Injection Vulnerability in MetaGPT Minecraft Integration
piyush-bhor
not applicable
Code Injection in metagpt.strategy.tot in geekan/metagpt
yuligesec
informative
Critical
RCE in DataInterpreter
d4rkd0g
informative
Critical
Code Injection via the load() Function of the Message Class
williwollo
informative
High
Remote code execution caused by prompt injection.
lyutoon
informative
Critical