CVE

CVE-2024-31451

Date: (C)2024-04-17   (M)2024-04-23

DocsGPT is a GPT-powered chat for documentation. DocsGPT is vulnerable to unauthenticated limited file write in routes.py. This vulnerability is fixed in 0.8.1.

Reference:

https://github.com/arc53/DocsGPT/commit/d36f58230a326ecacb9c32a4ae8eac65666044f2

https://github.com/arc53/DocsGPT/security/advisories/GHSA-p5qc-vj2x-9rjp

https://securitylab.github.com/advisories/GHSL-2023-250_DocsGPT