Threats tagged 'ghsa-5h42-cm7h-7vh6'

A remote code injection vulnerability exists in the execute_code function of the code_utils.py file within the CodeAction component of eosphoros-ai DB-GPT versions up to 0.8.2. This flaw allows an attacker to execute arbitrary code remotely. Public exploit code has been released, and the project has not yet issued a response or fix.