-
Notifications
You must be signed in to change notification settings - Fork 46.1k
Security: Significant-Gravitas/AutoGPT
Security Navigation
Security Advisories
View known security vulnerabilities and report new vulnerabilities privately to maintainers.
-
Authorization Bypass in Graph Execution External APIGHSA-x77j-qg2x-fgg6 published
Jul 29, 2025 by ntindleHigh -
Cross-user sharing of node execution results through WebSockets APIGHSA-958f-37vw-jx8f published
Apr 11, 2025 by ntindleLow -
SSRF due to DNS Rebinding in requests wrapperGHSA-wvjg-9879-3m7w published
Apr 11, 2025 by ntindleHigh -
Leakage of cross-domain cookies and protected headers in requests redirectGHSA-ggcm-93qg-gfhp published
Apr 11, 2025 by ntindleHigh -
There is an SSRF vulnerability in AutoGPT Beta via IPv6GHSA-4c8v-hwxc-2356 published
Mar 8, 2025 by ntindleCritical -
System logs spoofable via ANSI control sequencesGHSA-r7f7-qrrv-3fjh published
Jul 10, 2023 by PwutsLow -
Python code execution sandbox escape in non-docker versionGHSA-5h38-mgp9-rj5f published
Jul 10, 2023 by PwutsHigh -
Docker escape when running from docker-compose.yml included in git repoGHSA-x5gj-2chr-4ch6 published
Jul 10, 2023 by PwutsHigh