CVE Tools
Track your stack

Dbgpt

10 CVEs tracked since 2025. Since Mar 2025, none of them reached CISA KEV.

Dbgpt CVEs per month

Mar 2025 to Oct 2026. Point at a month, or focus the strip and use the arrow keys.
Dbgpt CVEs per month, with the share now in CISA KEV
MonthCVEsIn CISA KEV
2025-03100
2025-044 or fewer
2025-054 or fewer
2025-064 or fewer
2025-075 or fewer
2025-084 or fewer
2025-094 or fewer
2025-104 or fewer
2025-114 or fewer
2025-125 or fewer
2026-015 or fewer
2026-025 or fewer
2026-037 or fewer
2026-046 or fewer
2026-057 or fewer
2026-067 or fewer
2026-077 or fewer
2026-088 or fewer
2026-099 or fewer
2026-108 or fewer

Products

The products that kept showing up in Dbgpt's monthly top three, with their CVEs summed over those months.

  1. Db-gpt101 month

Latest CVEs

The 13 most recently published vulnerabilities affecting Dbgpt.

  1. CVE-2025-51459File Upload vulnerability in agent.hub.controller.refresh_plugins in eosphoros-ai DB-GPT 0.7.0 allows remote attackers to execute arbitrary code via a malicious plugin ZIP file uploaded to the /v1/...6.5
  2. CVE-2025-51458SQL Injection in editor_sql_run and query_ex in eosphoros-ai DB-GPT 0.7.0 allows remote attackers to execute arbitrary SQL statements via crafted input passed to the /v1/editor/sql/run or /v1/edito...6.5
  3. CVE-2025-6772eosphoros-ai db-gpt import import_flow path traversal7.3
  4. CVE-2024-10830Path Traversal in eosphoros-ai/db-gpt8.2
  5. CVE-2024-10834Arbitrary File Write in eosphoros-ai/db-gpt9.1
  6. CVE-2024-10833Arbitrary File Write in eosphoros-ai/db-gpt9.1
  7. CVE-2024-10906Cross-Site Request Forgery (CSRF) in eosphoros-ai/db-gpt8.1
  8. CVE-2024-10829Denial of Service (DoS) via Multipart Boundary in eosphoros-ai/db-gpt7.5
  9. CVE-2024-10901Arbitrary File Write via DuckDB SQL Injection in eosphoros-ai/db-gpt9.8
  10. CVE-2024-10835Arbitrary File Write via SQL Injection in eosphoros-ai/db-gpt9.8
  11. CVE-2024-10902Arbitrary File Upload with Path Traversal in eosphoros-ai/db-gpt9.8
  12. CVE-2024-10831Arbitrary File Write through Absolute Path Traversal in eosphoros-ai/db-gpt9.1
  13. CVE-2025-0452Arbitrary File Deletion in eosphoros-ai/DB-GPT8.2

The record

Peak rank
#95 in Mar 2025
Busiest month shown
Mar 2025, 10 CVEs
Months with a KEV entry
0 since Mar 2025
Monthly snapshots
1 since 2025
Dbgpt's full record, month by month