Vulnerabilities

TI-2024-01749 CVE-2024-1880 · GHSA-rf3r-wjj9-3842

OS Command Injection in MacOS Text-To-Speech Class in significant-gravitas/autogpt

HIGH 69

An OS command injection vulnerability exists in the MacOS Text-To-Speech class MacOSTTS of the significant-gravitas/autogpt project, affecting versions up to v0.5.0.

CVSS 3.1HIGH 7.8 Local Low privileges No interaction EPSS 0.01017 Published 2024-06-06 Fixed in 5.1.0 CWE-78

TI-2024-01750 CVE-2024-1881 · GHSA-rr88-j2r8-3xpc

Improper Neutralization of Special Elements used in an OS Command in significant-gravitas/autogpt

HIGH 76

AutoGPT, a component of significant-gravitas/autogpt, is vulnerable to an improper neutralization of special elements used in an OS command ('OS Command Injection') due to a flaw in its shell command validation function.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.01427 Published 2024-06-06 Fixed in 5.1.0 CWE-78

Vulnerabilities

Filters

OS Command Injection in MacOS Text-To-Speech Class in significant-gravitas/autogpt

Improper Neutralization of Special Elements used in an OS Command in significant-gravitas/autogpt