Security Advisories
CVEs affecting projects tracked on Release Alert, from NVD & OSV.
CVE-2024-23750
8.8
HIGHCVSS v3
Published
January 22, 2024
Affected
1 project
Assigned by
MITRE
Severity scale
010
Description
MetaGPT through 0.6.4 allows the QaEngineer role to execute arbitrary code because RunCode.run_script() passes shell metacharacters to subprocess.Popen.
FoundationAgents/MetaGPT
GitHub🌟 The Multi-Agent Framework: First AI Software Company, Towards Natural Language Programming
GitHub🌟 The Multi-Agent Framework: First AI Software Company, Towards Natural Language Programming<= 0.6.4, <= 0.6.6, < 0.6.5NVD