Binary-husky - vulnerabilities (CVEs)

29 CVEs in 2 products, 0 in the last 30 days, newest from 2026-01-23.

Products

Gpt Academic - 29 CVEs
Binary-huskygpt Academic - 22 CVEs

Newest CVEs of Binary-husky

CVE-2026-0764 - CVSS 9.8 (critical), 2026-01-23: GPT Academic upload Deserialization of Untrusted Data Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary…
CVE-2026-0763 - CVSS 9.8 (critical), 2026-01-23: GPT Academic run_in_subprocess_wrapper_func Deserialization of Untrusted Data Remote Code Execution Vulnerability. This vulnerability allows remote attackers…
CVE-2026-0762 - CVSS 8.1 (high), 2026-01-23: GPT Academic stream_daas Deserialization of Untrusted Data Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute…
CVE-2025-10236 - CVSS 7.5 (high), 2025-09-11: A vulnerability has been found in binary-husky gpt_academic up to 3.91. Impacted is the function merge_tex_files_ of the file…
CVE-2025-0183 - CVSS 5.4 (medium), 2025-03-20: A stored cross-site scripting (XSS) vulnerability exists in the Latex Proof-Reading Module of binary-husky/gpt_academic version 3.9.0. This vulnerability…
CVE-2024-12388 - CVSS 6.5 (medium), 2025-03-20: A vulnerability in binary-husky/gpt_academic version 310122f allows for a Regular Expression Denial of Service (ReDoS) attack. The application uses a regular…
CVE-2024-12391 - CVSS 6.5 (medium), 2025-03-20: A vulnerability in binary-husky/gpt_academic, as of commit 310122f, allows for a Regular Expression Denial of Service (ReDoS) attack. The function…
CVE-2024-12387 - CVSS 6.5 (medium), 2025-03-20: A vulnerability in the binary-husky/gpt_academic repository, as of commit git 3890467, allows an attacker to crash the server by uploading a specially crafted…
CVE-2024-12390 - CVSS 8.8 (high), 2025-03-20: A vulnerability in binary-husky/gpt_academic version git 310122f allows for remote code execution. The application supports the extraction of user-provided…
CVE-2024-12389 - CVSS 8.8 (high), 2025-03-20: A path traversal vulnerability exists in binary-husky/gpt_academic version git 310122f. The application supports the extraction of user-provided 7z files…
CVE-2024-12392 - CVSS 6.5 (medium), 2025-03-20: A Server-Side Request Forgery (SSRF) vulnerability exists in binary-husky/gpt_academic version git 310122f. The application has a functionality to download…
CVE-2024-11037 - CVSS 6.5 (medium), 2025-03-20: A path traversal vulnerability exists in binary-husky/gpt_academic at commit 679352d, which allows an attacker to bypass the blocked_paths protection and read…
CVE-2024-11039 - CVSS 8.8 (high), 2025-03-20: A pickle deserialization vulnerability exists in the Latex English error correction plug-in function of binary-husky/gpt_academic versions up to and including…
CVE-2024-11030 - CVSS 7.7 (high), 2025-03-20: GPT Academic version 3.83 is vulnerable to a Server-Side Request Forgery (SSRF) vulnerability through its HotReload plugin function, which calls the…
CVE-2024-10950 - CVSS 8.8 (high), 2025-03-20: In binary-husky/gpt_academic version <= 3.83, the plugin `CodeInterpreter` is vulnerable to code injection caused by prompt injection. The root cause is the…
CVE-2024-10986 - CVSS 8.8 (high), 2025-03-20: GPT Academic version 3.83 is vulnerable to a Local File Read (LFI) vulnerability through its HotReload function. This function can download and extract tar.gz…
CVE-2024-11033 - CVSS 6.5 (medium), 2025-03-20: A Denial of Service (DoS) vulnerability exists in the file upload feature of binary-husky/gpt_academic version 3.83. The vulnerability is due to improper…
CVE-2024-10956 - CVSS 7.6 (high), 2025-03-20: GPT Academy version 3.83 in the binary-husky/gpt_academic repository is vulnerable to Cross-Site WebSocket Hijacking (CSWSH). This vulnerability allows an…
CVE-2024-11031 - CVSS 7.7 (high), 2025-03-20: In version 3.83 of binary-husky/gpt_academic, a Server-Side Request Forgery (SSRF) vulnerability exists in the Markdown_Translate.get_files_from_everything()…
CVE-2024-10954 - CVSS 8.8 (high), 2025-03-20: In the `manim` plugin of binary-husky/gpt_academic, versions prior to the fix, a vulnerability exists due to improper handling of user-provided prompts. The…
CVE-2024-10948 - CVSS 6.5 (medium), 2025-03-20: A vulnerability in the upload function of binary-husky/gpt_academic allows any user to read arbitrary files on the system, including sensitive files such as…
CVE-2024-10819 - CVSS 8.8 (high), 2025-03-20: A Cross-Site Request Forgery (CSRF) vulnerability in version 3.83 of binary-husky/gpt_academic allows an attacker to trick a user into uploading files without…
CVE-2024-10812 - CVSS 6.1 (medium), 2025-03-20: An open redirect vulnerability exists in binary-husky/gpt_academic version 3.83. The vulnerability occurs when a user is redirected to a URL specified by…
CVE-2024-10714 - CVSS 7.5 (high), 2025-03-20: A vulnerability in binary-husky/gpt_academic version 3.83 allows an attacker to cause a Denial of Service (DoS) by adding excessive characters to the end of a…
CVE-2025-25185 - CVSS 7.5 (high), 2025-03-03: GPT Academic provides interactive interfaces for large language models. In 3.91 and earlier, GPT Academic does not properly account for soft links. An…
CVE-2024-10100 - CVSS 7.5 (high), 2024-10-17: A path traversal vulnerability exists in binary-husky/gpt_academic version 3.83. The vulnerability is due to improper handling of the file parameter, which is…
CVE-2024-10101 - CVSS 5.4 (medium), 2024-10-17: A stored cross-site scripting (XSS) vulnerability exists in binary-husky/gpt_academic version 3.83. The vulnerability occurs at the /file endpoint, which…
CVE-2024-31224 - CVSS 9.8 (critical), 2024-04-08: GPT Academic provides interactive interfaces for large language models. A vulnerability was found in gpt_academic versions 3.64 through 3.73. The server…
CVE-2023-33979 - CVSS 6.5 (medium), 2023-05-31: gpt_academic provides a graphical interface for ChatGPT/GLM. A vulnerability was found in gpt_academic 3.37 and prior. This issue affects some unknown…