FastGPT 安全漏洞

FastGPT is an open-source knowledge base question-answering system based on large language models developed by Labring. Versions of FastGPT prior to 4.15.0-beta1 contained a security vulnerability. This vulnerability stemmed from the JavaScript sandbox worker’s use of regular expressions. It test...

Missing Authorization

github.com/labring/sealos is vulnerable to Missing Authorization. The vulnerability exists due to the permission flaw in the Sealos billing system, which allows attackers to control the recharge resource account and recharge any amount of 1 RMB through the io/v1/Payment endpoint...

Improper Authentication

github.com/labring/sealos is vulnerable to Improper Authentication. The vulnerability exists due to Improper configuration in RBAC permissions, which allows an attacker to gain access and perform unauthorized actions...