Priority HIGH 82
DocsGPT is a GPT-powered chat for documentation.
arc53
Records5All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical2CVSS 9.0–10.0
CVSS high0CVSS 7.0–8.9
Exploited now
arc53 records in CISA KEVNo arc53 vulnerabilities are listed in CISA KEV.
Components
Products in the NVD configurations · select one to filter the recordsRecords
5 records
TI-2025-00736 CVE-2025-0868 · GHSA-9gff-5v8w-x922
Remote Code Execution in DocsGPT
Priority HIGH 65
A vulnerability, that could result in Remote Code Execution (RCE), has been found in DocsGPT.
TI-2026-11409 CVE-2026-13483 · GHSA-v4h4-747p-qjgx
arc53 DocsGPT Credential Storage encryption.py encrypt_credentials data authenticity
Priority MEDIUM 45
A flaw has been found in arc53 DocsGPT up to 0.18.0.
TI-2024-20815 CVE-2024-31451
Limited file write in routes.py (GHSL-2023-250)
Priority LOW 31
DocsGPT is a GPT-powered chat for documentation.
TI-2026-61924 CVE-2026-91201 · GHSA-x85x-q6hq-hm4x
DocsGPT through 0.20.0 OAuth Token Disclosure via Wildcard postMessage
Priority LOW 23
DocsGPT through 0.20.0 posts OAuth connector session tokens to a wildcard target origin in the callback-status endpoint without validating sender origin.