Vendors / imartinez Records 10 All Threatist records
Exploited (KEV) 0 None in CISA KEV
CVSS critical 1
CVSS high 4
Exploited now imartinez records in CISA KEV No imartinez vulnerabilities are listed in CISA KEV.
Components Products in the NVD configurations · select one to filter the records Priority HIGH 82
A Python command injection vulnerability exists in the `SagemakerLLM` class's `complete()` method within `./private_gpt/components/llm/custom/sagemaker.py` of the imartinez/privategpt application, versions up to and incl…
CVSS 3.1 CRITICAL 9.8· Network · No auth · No interaction · EPSS 0.02685 · Published 2024-11-14 · Fixed in 0.6.0 CWE-78
Priority HIGH 72
A Denial of Service (DoS) vulnerability exists in the file upload feature of imartinez/privategpt version v0.6.2.
CVSS 3.0 HIGH 7.5· Network · No auth · No interaction · EPSS 0.00788 · Published 2025-03-20 · No fix listed CWE-400
Priority HIGH 72
A vulnerability in imartinez/privategpt version 0.5.0 allows for a Denial of Service (DOS) attack.
CVSS 3.0 HIGH 7.5· Network · No auth · No interaction · EPSS 0.00637 · Published 2025-03-20 · No fix listed CWE-770
Priority HIGH 72
imartinez/privategpt version 0.2.0 is vulnerable to a local file inclusion vulnerability that allows attackers to read arbitrary files from the filesystem.
CVSS 3.0 HIGH 7.5· Network · No auth · No interaction · EPSS 0.011 · Published 2024-05-16 · No fix listed CWE-22
Priority HIGH 71
A Server-Side Request Forgery (SSRF) vulnerability exists in the file upload section of imartinez/privategpt version 0.5.0.
CVSS 3.1 HIGH 7.2· Network · No auth · No interaction · EPSS 0.00344 · Published 2024-06-06 · No fix listed CWE-918
Priority MEDIUM 60
An XSS vulnerability was discovered in the upload file(s) process of imartinez/privategpt v0.5.0.
CVSS 3.1 MEDIUM 6.1· Network · No auth · User interaction · EPSS 0.00356 · Published 2025-03-20 · No fix listed CWE-79
Priority MEDIUM 60
An open redirect vulnerability exists in imartinez/privategpt version 0.5.0 due to improper handling of the 'file' parameter.
CVSS 3.1 MEDIUM 6.1· Network · No auth · User interaction · EPSS 0.30074 · Published 2024-06-27 · No fix listed CWE-601
Priority MEDIUM 58
A Cross-Site Request Forgery (CSRF) vulnerability in version 0.5.0 of imartinez/privategpt allows an attacker to delete all uploaded files on the server.
CVSS 3.1 MEDIUM 5.4· Network · No auth · User interaction · EPSS 0.00179 · Published 2024-06-27 · No fix listed CWE-352
Priority MEDIUM 57
A vulnerability, which was classified as problematic, was found in Zylon PrivateGPT up to 0.6.2.
CVSS 4.0 MEDIUM 5.3· Network · No auth · User interaction · EPSS 0.00363 · Published 2025-05-10 · No fix listed CWE-346
Priority LOW 24
A stored Cross-Site Scripting (XSS) vulnerability exists in the 'imartinez/privategpt' repository due to improper validation of file uploads.
CVSS 3.1 MEDIUM 5.4· Network · Low privileges · User interaction · EPSS 0.00317 · Published 2024-05-16 · No fix listed CWE-79
Open these records in search → All records by CVSS severity
1 4 5 0 0
THREATIST.IORead the docs