CVE Tools
Track your stack

Eosphoros-ai

10 CVEs tracked since 2025. Since Mar 2025, none of them reached CISA KEV.

Eosphoros-ai CVEs per month

Mar 2025 to Oct 2026. Point at a month, or focus the strip and use the arrow keys.
Eosphoros-ai CVEs per month, with the share now in CISA KEV
MonthCVEsIn CISA KEV
2025-03100
2025-044 or fewer
2025-054 or fewer
2025-064 or fewer
2025-075 or fewer
2025-084 or fewer
2025-094 or fewer
2025-104 or fewer
2025-114 or fewer
2025-125 or fewer
2026-015 or fewer
2026-025 or fewer
2026-037 or fewer
2026-046 or fewer
2026-057 or fewer
2026-067 or fewer
2026-077 or fewer
2026-088 or fewer
2026-099 or fewer
2026-108 or fewer

Products

The products that kept showing up in Eosphoros-ai's monthly top three, with their CVEs summed over those months.

  1. Eosphoros-ai/db-gpt101 month

Latest CVEs

The 15 most recently published vulnerabilities affecting Eosphoros-ai.

  1. CVE-2026-77933DB-GPT through 0.8.2 Hardcoded MySQL Root Credentials in docker-compose Deployment9.8
  2. CVE-2026-77932DB-GPT through 0.8.2 Unauthenticated RCE via /api/v1/chat/react-agent9.8
  3. CVE-2026-80104DB-GPT 0.8.0 Path Traversal Arbitrary File Write via Skill Upload Filename9.8
  4. CVE-2026-73034DB-GPT v0.8.1 Path Traversal Arbitrary File Write via user_id Header9.8
  5. CVE-2026-4505eosphoros-ai DB-GPT FastAPI Endpoint controller.py module_plugin.refresh_plugins unrestricted upload6.3
  6. CVE-2026-4504eosphoros-ai db-gpt Incomplete Fix editor sql injection7.3
  7. CVE-2026-3409eosphoros-ai db-gpt Flow Import Endpoint import importlib.machinery.SourceFileLoader.exec_module code injection7.3
  8. CVE-2025-6772eosphoros-ai db-gpt import import_flow path traversal7.3
  9. CVE-2024-10830Path Traversal in eosphoros-ai/db-gpt8.2
  10. CVE-2024-10834Arbitrary File Write in eosphoros-ai/db-gpt9.1
  11. CVE-2024-10833Arbitrary File Write in eosphoros-ai/db-gpt9.1
  12. CVE-2024-10906Cross-Site Request Forgery (CSRF) in eosphoros-ai/db-gpt8.1
  13. CVE-2024-10829Denial of Service (DoS) via Multipart Boundary in eosphoros-ai/db-gpt7.5
  14. CVE-2024-10901Arbitrary File Write via DuckDB SQL Injection in eosphoros-ai/db-gpt9.8
  15. CVE-2024-10835Arbitrary File Write via SQL Injection in eosphoros-ai/db-gpt9.8

The record

Peak rank
#98 in Mar 2025
Busiest month shown
Mar 2025, 10 CVEs
Months with a KEV entry
0 since Mar 2025
Monthly snapshots
1 since 2025
Eosphoros-ai's full record, month by month