What’s Vulnerable › Products

imartinez/privategpt vulnerabilities

11 known vulnerabilities, 0 confirmed exploited in the wild (CISA KEV), 6 published in the last 12 months.

Check whether your imartinez/privategpt version is affected

Latest imartinez/privategpt vulnerabilities

• CVE-2026-116000 — Zylon PrivateGPT URI Artifact Loader uri_loader.py load_file_from_uri server-side request forgery (CVSS 7.3)
• CVE-2025-4515 — Zylon PrivateGPT settings.yaml cross-domain policy (CVSS 6.5)
• CVE-2024-8029 — Stored XSS in imartinez/privategpt (CVSS 6.1)
• CVE-2024-8018 — Denial of Service (DOS) in imartinez/privategpt (CVSS 7.5)
• CVE-2024-12063 — Denial of Service in imartinez/privategpt (CVSS 7.5)
• CVE-2024-4343 — Python Command Injection in imartinez/privategpt (CVSS 9.8)
• CVE-2024-5936 — Open Redirect in imartinez/privategpt (CVSS 6.1)
• CVE-2024-5935 — CSRF Vulnerability in imartinez/privategpt (CVSS 5.4)
• CVE-2024-5186 — Server Side Request Forgery (SSRF) in imartinez/privategpt (CVSS 7.2)
• CVE-2024-3851 — Unrestricted File Upload Leading to XSS in imartinez/privategpt (CVSS 5.4)
• CVE-2024-3403 — Local File Inclusion in imartinez/privategpt (CVSS 7.5)