Filtered by vendor Arc53 Subscriptions
Total 3 CVE
CVE Vendors Products Updated CVSS v3.1
CVE-2026-26015 1 Arc53 1 Docsgpt 2026-04-29 N/A
DocsGPT is a GPT-powered chat for documentation. From version 0.15.0 to before version 0.16.0, an attacker accessing both the official DocsGPT website or any local and public deployment, can craft a malicious payload bypassing the "MCP test" behavior to achieve arbitrary remote code execution (RCE). This issue has been patched in version 0.16.0.
CVE-2025-0868 1 Arc53 1 Docsgpt 2026-04-15 N/A
A vulnerability, that could result in Remote Code Execution (RCE), has been found in DocsGPT. Due to improper parsing of JSON data using eval() an unauthorized attacker could send arbitrary Python code to be executed via /api/remote endpoint.. This issue affects DocsGPT: from 0.8.1 through 0.12.0.
CVE-2024-31451 1 Arc53 1 Docsgpt 2026-04-15 5.3 Medium
DocsGPT is a GPT-powered chat for documentation. DocsGPT is vulnerable to unauthenticated limited file write in routes.py. This vulnerability is fixed in 0.8.1.