Lucene search
+L

170 matches found

OSV
OSV
added 2026/07/07 4:03 p.m.12 views

PYSEC-2026-1197 AstrBot has an arbitrary file read vulnerability in function _encode_image_bs64

AstrBot Project v3.5.22 has an arbitrary file read vulnerability in function encodeimagebs64. Since the encodeimagebs64 function defined in entities.py opens the image specified by the user in the request body and returns the image content as a base64-encoded string without checking the legitimac...

7.1CVSS6.1AI score0.00318EPSS
SaveExploits1References5
Rows per page
Query Builder