repository icon
imartinez / privategpt Project repository

Interact with your documents using the power of GPT, 100% privately, no data leaks

Submit a report

FIRST INTERACTION

WITHINN/A DAYS

REVIEW

WITHIN47 DAYS

FIX

WITHIN259 DAYS

Unsafe deserialization via pickle in PrivateGPT document and index loading
etwithin
pending
CORS Misconfiguration Vulnerability Leading to Sensitive Information Leak
superboy-zjc
pending
DoS by Sending Large Filename at File Upload Endpoint
mnqazi
High
•$750•CVE-2024-12063
Server Side Request Forgery using CVE-2024-4325
mnqazi
duplicate
High
Stored XSS via upload
web-hacker-team
Medium
•$125•CVE-2024-8029
DOS in multipart boundry while uploading the file
mnqazi
High
•$750•CVE-2024-8018
Open Redirect due to improper handling in file parameter
mnqazi
Medium
•$125•CVE-2024-5936
CSRF on delete all files.
mnqazi
Medium
•$125•CVE-2024-5935
Server Side Request Forgery (SSRF)
mvlttt
High
•$750•CVE-2024-5186
Unrestricted file upload leads to XSS
hiu240900
Medium
•$125•CVE-2024-3851
Using eval() in sagemaker.py to load external AWS Sagemaker LLM request leading...
retr0reg
Critical
•$1500•CVE-2024-4343
Local File Inclusion
pinkdraconian
High
•$750•CVE-2024-3403