Openchatbi
Approved changes feed: RSS · Atom
cpe:2.3:a:zhongyu09:openchatbi:*:*:*:*:*:*:*:*part: a version: * update: *
| Vendor | Zhongyu09 (83623be2-192e-59af-8fe7-b6c482708cf5) |
|---|---|
| Product | Openchatbi (e05d9751-74ea-5a1b-b663-32101d90a552) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | * |
| Target hardware | * |
| Other | * |
Notes
Imported from gcve-enriched-dumps CVE data
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
pkg:github/zhongyu09/openchatbi |
purl2cpe | 2026-07-28 16:40:49.429726 |
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2026-5586 |
vulnerable | 2026-06-08 08:07:03.873359 |
zhongyu09 openchatbi Multi-stage Text2SQL Workflow sql injection
MEDIUM (6.3)
A vulnerability was determined in zhongyu09 openchatbi up to 0.2.1. The impacted element is an unknown function of the component Multi-stage Text2SQL Workflow. Executing a manipulation of the argument keywords can lead to sql injection. The attack may be launched remotely. The exploit has been publicly disclosed and may be utilized.
Published: 2026-04-05T18:00:13.356Z
Updated: 2026-05-20T08:45:43.386Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2026-28795 |
vulnerable | 2026-06-08 07:55:15.680406 |
OpenChatBI: Critical Path Traversal Vulnerability in save_report Tool of OpenChatBI
OpenChatBI is an intelligent chat-based BI tool powered by large language models, designed to help users query, analyze, and visualize data through natural language conversations. Prior to version 0.2.2, the save_report tool in openchatbi/tool/save_report.py suffers from a critical path traversal vulnerability due to insufficient input sanitization of the file_format parameter. This issue has been patched in version 0.2.2.
Published: 2026-03-06T06:21:52.789Z
Updated: 2026-03-09T19:52:48.920Z |
Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.
Inspect record JSON
Open this panel to browse, search, copy or download the JSON record.