https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Tue, 06 Oct 2026 06:00:13 +0000 https://cve.radiocsirt.org/vuln/cnvd-2025-06184 cnvd-2025-06184 https://cve.radiocsirt.org/vuln/cnvd-2025-06184 https://cve.radiocsirt.org/vuln/euvd-2026-223946 EUVD-2026-223946 https://cve.radiocsirt.org/vuln/euvd-2026-223946 https://cve.radiocsirt.org/vuln/fkie_cve-2024-9216 <p>An authentication bypass vulnerability exists in gaizhenbiao/ChuanhuChatGPT, as of commit 3856d4f, allowing any user to read and delete other users&#39; chat history. The vulnerability arises because the username is provided via an HTTP request from the client side, rather than being read from a secure source like a cookie. This allows an attacker to pass another user&#39;s username to the get_model function, thereby gaining unauthorized access to that user&#39;s chat history.</p> <p>An authentication bypass vulnerability exists in gaizhenbiao/ChuanhuChatGPT, as of commit 3856d4f, allowing any user to read and delete other users&#39; chat history. The vulnerability arises because the username is provided via an HTTP request from the client side, rather than being read from a secure source like a cookie. This allows an attacker to pass another user&#39;s username to the get_model function, thereby gaining unauthorized access to that user&#39;s chat history.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2024-9216 https://cve.radiocsirt.org/vuln/ghsa-g3p7-f346-26m6 <p>An authentication bypass vulnerability exists in gaizhenbiao/ChuanhuChatGPT, as of commit 3856d4f, allowing any user to read and delete other users&#39; chat history. The vulnerability arises because the username is provided via an HTTP request from the client side, rather than being read from a secure source like a cookie. This allows an attacker to pass another user&#39;s username to the get_model function, thereby gaining unauthorized access to that user&#39;s chat history.</p> <p>An authentication bypass vulnerability exists in gaizhenbiao/ChuanhuChatGPT, as of commit 3856d4f, allowing any user to read and delete other users&#39; chat history. The vulnerability arises because the username is provided via an HTTP request from the client side, rather than being read from a secure source like a cookie. This allows an attacker to pass another user&#39;s username to the get_model function, thereby gaining unauthorized access to that user&#39;s chat history.</p> https://cve.radiocsirt.org/vuln/ghsa-g3p7-f346-26m6 https://cve.radiocsirt.org/vuln/pysec-2025-97 <p><strong>Affected:</strong> PyPI: chuanhuchatgpt</p> <p>An authentication bypass vulnerability exists in gaizhenbiao/ChuanhuChatGPT, as of commit 3856d4f, allowing any user to read and delete other users&#39; chat history. The vulnerability arises because the username is provided via an HTTP request from the client side, rather than being read from a secure source like a cookie. This allows an attacker to pass another user&#39;s username to the get_model function, thereby gaining unauthorized access to that user&#39;s chat history.</p> <p><strong>Affected:</strong> PyPI: chuanhuchatgpt</p> <p>An authentication bypass vulnerability exists in gaizhenbiao/ChuanhuChatGPT, as of commit 3856d4f, allowing any user to read and delete other users&#39; chat history. The vulnerability arises because the username is provided via an HTTP request from the client side, rather than being read from a secure source like a cookie. This allows an attacker to pass another user&#39;s username to the get_model function, thereby gaining unauthorized access to that user&#39;s chat history.</p> https://cve.radiocsirt.org/vuln/pysec-2025-97