Binary-husky GPT Academic 3.91
Approved changes feed: RSS · Atom
cpe:2.3:a:binary-husky:gpt_academic:3.91:*:*:*:*:*:*:*
part: a version: 3.91 update: *
| Vendor | Binary Husky (cb3b3287-ac03-54a7-a70b-639de433b149) |
|---|---|
| Product | Gpt Academic (cd658d46-89db-504b-bd64-83a07e05e9f2) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | * |
| Target hardware | * |
| Other | * |
| Notes | Imported from NVD CPE 2.0 feed |
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
pkg:github/binary-husky/gpt_academic |
purl2cpe | 2026-06-01 10:12:37.664871 |
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2026-0764 |
vulnerable | 2026-06-08 07:47:13.156985 |
GPT Academic upload Deserialization of Untrusted Data Remote Code Execution Vulnerability
CRITICAL (9.8)
GPT Academic upload Deserialization of Untrusted Data Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of GPT Academic. Authentication is not required to exploit this vulnerability.
The specific flaw exists within the upload endpoint. The issue results from the lack of proper validation of user-supplied data, which can result in deserialization of untrusted data. An attacker can leverage this vulnerability to execute code in the context of root. Was ZDI-CAN-27957.
Published: 2026-01-23T03:28:27.852Z
Updated: 2026-01-23T19:20:21.446Z Reference links |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2026-0763 |
vulnerable | 2026-06-08 07:47:13.156685 |
GPT Academic run_in_subprocess_wrapper_func Deserialization of Untrusted Data Remote Code Execution Vulnerability
CRITICAL (9.8)
GPT Academic run_in_subprocess_wrapper_func Deserialization of Untrusted Data Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of GPT Academic. Authentication is not required to exploit this vulnerability.
The specific flaw exists within the run_in_subprocess_wrapper_func function. The issue results from the lack of proper validation of user-supplied data, which can result in deserialization of untrusted data. An attacker can leverage this vulnerability to execute code in the context of root. Was ZDI-CAN-27958.
Published: 2026-01-23T03:28:23.424Z
Updated: 2026-01-23T19:21:28.790Z Reference links |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2026-0762 |
vulnerable | 2026-06-08 07:47:13.155900 |
GPT Academic stream_daas Deserialization of Untrusted Data Remote Code Execution Vulnerability
HIGH (8.1)
GPT Academic stream_daas Deserialization of Untrusted Data Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of GPT Academic. Interaction with a malicious DAAS server is required to exploit this vulnerability but attack vectors may vary depending on the implementation.
The specific flaw exists within the stream_daas function. The issue results from the lack of proper validation of user-supplied data, which can result in deserialization of untrusted data. An attacker can leverage this vulnerability to execute code in the context of root. Was ZDI-CAN-27956.
Published: 2026-01-23T03:28:19.689Z
Updated: 2026-01-23T19:23:27.751Z Reference links |
Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.