astrbot
PyPI · Package
Vulnerability alerts
Follow| Report | Product | Ecosystem | Severity | Fix status | Last updated |
|---|---|---|---|---|---|
| AstrBot is vulnerable to RCE with hard-coded JWT signing keys | astrbot | PyPI | Critical | Fix reported | |
| AstrBot Has Path Traversal Vulnerability in /api/chat/get_file | astrbot | PyPI | High | Fix reported | |
| AstrBot Makes Use of Hard-coded Password | astrbot | PyPI | Medium | No fix reported | |
| AstrBot has Incomplete Filtering of Special Elements | astrbot | PyPI | Low | No fix reported | |
| AstrBot: File upload vulnerability in the function post_file of the file astrbot/dashboard/routes/chat.py | astrbot | PyPI | Low | Fix reported | |
| AstrBot: Manipulation of astr_main_agent's session_id parameter leads to authorization bypass | astrbot | PyPI | Low | No fix reported | |
| AstrBot has an arbitrary file read vulnerability in function _encode_image_bs64 | astrbot | PyPI | Medium | No fix reported | |
| AstrBot contains a directory traversal vulnerability | astrbot | PyPI | High | No fix reported |