Most recent entries from all https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Mon, 05 Oct 2026 08:46:13 +0000 CVE-2025-6853 — chatchat-space Langchain-Chatchat Backend upload_temp_docs path traversal https://cve.radiocsirt.org/vuln/cve-2025-6853 <p><strong>Affected:</strong> chatchat-space Langchain-Chatchat</p> <p>A vulnerability classified as critical has been found in chatchat-space Langchain-Chatchat up to 0.3.1. This affects the function upload_temp_docs of the file /knowledge_base/upload_temp_docs of the component Backend. The manipulation of the argument flag leads to path traversal. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may be used.</p> <p><strong>Affected:</strong> chatchat-space Langchain-Chatchat</p> <p>A vulnerability classified as critical has been found in chatchat-space Langchain-Chatchat up to 0.3.1. This affects the function upload_temp_docs of the file /knowledge_base/upload_temp_docs of the component Backend. The manipulation of the argument flag leads to path traversal. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may be used.</p> https://cve.radiocsirt.org/vuln/cve-2025-6853 GHSA-qmgv-j263-qr33 — Langchain-Chatchat has a Path Traversal vulnerability https://cve.radiocsirt.org/vuln/ghsa-qmgv-j263-qr33 <p><strong>Affected:</strong> PyPI: langchain-chatchat</p> <p>A vulnerability classified as critical has been found in chatchat-space Langchain-Chatchat up to 0.3.1. This affects the function upload_temp_docs of the file /knowledge_base/upload_temp_docs of the component Backend. The manipulation of the argument flag leads to path traversal. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may be used.</p> <p><strong>Affected:</strong> PyPI: langchain-chatchat</p> <p>A vulnerability classified as critical has been found in chatchat-space Langchain-Chatchat up to 0.3.1. This affects the function upload_temp_docs of the file /knowledge_base/upload_temp_docs of the component Backend. The manipulation of the argument flag leads to path traversal. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may be used.</p> https://cve.radiocsirt.org/vuln/ghsa-qmgv-j263-qr33