https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Sat, 03 Oct 2026 08:33:49 +0000 https://cve.radiocsirt.org/vuln/cnvd-2025-06194 cnvd-2025-06194 https://cve.radiocsirt.org/vuln/cnvd-2025-06194 https://cve.radiocsirt.org/vuln/euvd-2026-198294 EUVD-2026-198294 https://cve.radiocsirt.org/vuln/euvd-2026-198294 https://cve.radiocsirt.org/vuln/fkie_cve-2024-8143 <p>In the latest version (20240628) of gaizhenbiao/chuanhuchatgpt, an issue exists in the /file endpoint that allows authenticated users to access the chat history of other users. When a user logs in, a directory is created in the history folder with the user&#39;s name. By manipulating the /file endpoint, an authenticated user can enumerate and access files in other users&#39; directories, leading to unauthorized access to private chat histories. This vulnerability can be exploited to read any user&#39;s private chat history.</p> <p>In the latest version (20240628) of gaizhenbiao/chuanhuchatgpt, an issue exists in the /file endpoint that allows authenticated users to access the chat history of other users. When a user logs in, a directory is created in the history folder with the user&#39;s name. By manipulating the /file endpoint, an authenticated user can enumerate and access files in other users&#39; directories, leading to unauthorized access to private chat histories. This vulnerability can be exploited to read any user&#39;s private chat history.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2024-8143 https://cve.radiocsirt.org/vuln/ghsa-2h96-7jv3-737m <p>In the latest version (20240628) of gaizhenbiao/chuanhuchatgpt, an issue exists in the /file endpoint that allows authenticated users to access the chat history of other users. When a user logs in, a directory is created in the history folder with the user&#39;s name. By manipulating the /file endpoint, an authenticated user can enumerate and access files in other users&#39; directories, leading to unauthorized access to private chat histories. This vulnerability can be exploited to read any user&#39;s private chat history.</p> <p>In the latest version (20240628) of gaizhenbiao/chuanhuchatgpt, an issue exists in the /file endpoint that allows authenticated users to access the chat history of other users. When a user logs in, a directory is created in the history folder with the user&#39;s name. By manipulating the /file endpoint, an authenticated user can enumerate and access files in other users&#39; directories, leading to unauthorized access to private chat histories. This vulnerability can be exploited to read any user&#39;s private chat history.</p> https://cve.radiocsirt.org/vuln/ghsa-2h96-7jv3-737m https://cve.radiocsirt.org/vuln/pysec-2024-113 <p><strong>Affected:</strong> PyPI: chuanhuchatgpt</p> <p>In the latest version (20240628) of gaizhenbiao/chuanhuchatgpt, an issue exists in the /file endpoint that allows authenticated users to access the chat history of other users. When a user logs in, a directory is created in the history folder with the user&#39;s name. By manipulating the /file endpoint, an authenticated user can enumerate and access files in other users&#39; directories, leading to unauthorized access to private chat histories. This vulnerability can be exploited to read any user&#39;s private chat history.</p> <p><strong>Affected:</strong> PyPI: chuanhuchatgpt</p> <p>In the latest version (20240628) of gaizhenbiao/chuanhuchatgpt, an issue exists in the /file endpoint that allows authenticated users to access the chat history of other users. When a user logs in, a directory is created in the history folder with the user&#39;s name. By manipulating the /file endpoint, an authenticated user can enumerate and access files in other users&#39; directories, leading to unauthorized access to private chat histories. This vulnerability can be exploited to read any user&#39;s private chat history.</p> https://cve.radiocsirt.org/vuln/pysec-2024-113