https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Wed, 07 Oct 2026 07:45:36 +0000 https://cve.radiocsirt.org/vuln/cnvd-2025-22733 cnvd-2025-22733 https://cve.radiocsirt.org/vuln/cnvd-2025-22733 https://cve.radiocsirt.org/vuln/euvd-2026-247569 EUVD-2026-247569 https://cve.radiocsirt.org/vuln/euvd-2026-247569 https://cve.radiocsirt.org/vuln/fkie_cve-2024-10956 <p>GPT Academy version 3.83 in the binary-husky/gpt_academic repository is vulnerable to Cross-Site WebSocket Hijacking (CSWSH). This vulnerability allows an attacker to hijack an existing WebSocket connection between the victim&#39;s browser and the server, enabling unauthorized actions such as deleting conversation history without the victim&#39;s consent. The issue arises due to insufficient WebSocket authentication and lack of origin validation.</p> <p>GPT Academy version 3.83 in the binary-husky/gpt_academic repository is vulnerable to Cross-Site WebSocket Hijacking (CSWSH). This vulnerability allows an attacker to hijack an existing WebSocket connection between the victim&#39;s browser and the server, enabling unauthorized actions such as deleting conversation history without the victim&#39;s consent. The issue arises due to insufficient WebSocket authentication and lack of origin validation.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2024-10956 https://cve.radiocsirt.org/vuln/ghsa-6fwx-j832-vvw6 <p>GPT Academy version 3.83 in the binary-husky/gpt_academic repository is vulnerable to Cross-Site WebSocket Hijacking (CSWSH). This vulnerability allows an attacker to hijack an existing WebSocket connection between the victim&#39;s browser and the server, enabling unauthorized actions such as deleting conversation history without the victim&#39;s consent. The issue arises due to insufficient WebSocket authentication and lack of origin validation.</p> <p>GPT Academy version 3.83 in the binary-husky/gpt_academic repository is vulnerable to Cross-Site WebSocket Hijacking (CSWSH). This vulnerability allows an attacker to hijack an existing WebSocket connection between the victim&#39;s browser and the server, enabling unauthorized actions such as deleting conversation history without the victim&#39;s consent. The issue arises due to insufficient WebSocket authentication and lack of origin validation.</p> https://cve.radiocsirt.org/vuln/ghsa-6fwx-j832-vvw6