zhongyu09

Records3All Threatist records

Exploited (KEV)0None in CISA KEV

CVSS critical0CVSS 9.0–10.0

CVSS high1CVSS 7.0–8.9

Exploited now

zhongyu09 records in CISA KEV

No zhongyu09 vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records

Openchatbi 1 record HIGH

Records

3 records

TI-2026-22990 CVE-2026-28795 · GHSA-vmwq-8g8c-jm79

OpenChatBI: Critical Path Traversal Vulnerability in save_report Tool of OpenChatBI

HIGH 77

OpenChatBI is an intelligent chat-based BI tool powered by large language models, designed to help users query, analyze, and visualize data through natural language conversations.

CVSS 4.0HIGH 8.7 Network No auth No interaction EPSS 0.00508 Published 2026-03-06 Fixed in 0.2.2 CWE-22

TI-2026-57800 CVE-2026-84061 · GHSA-cx4x-wgfr-9r87

zhongyu09 OpenChatBI generate_sql.py _validate_sql_safety sql injection

MEDIUM 57

A security flaw has been discovered in zhongyu09 OpenChatBI up to 0.3.0.

CVSS 4.0MEDIUM 5.3 Network Low privileges No interaction EPSS 0.00316 Published 2026-09-01 No fix listed CWE-74

TI-2026-04897 CVE-2026-5586 · GHSA-gv9f-prh6-r6hh

zhongyu09 openchatbi Multi-stage Text2SQL Workflow sql injection

MEDIUM 57

A vulnerability was determined in zhongyu09 openchatbi up to 0.2.1.

CVSS 4.0MEDIUM 5.3 Network Low privileges No interaction EPSS 0.0026 Published 2026-04-05 No fix listed CWE-74

Open these records in search →

Critical	0
High	1
Medium	2
Low	0
No CVSS	0