Vulnerabilities > Deepwisdom
DATE | CVE | VULNERABILITY TITLE | RISK |
---|---|---|---|
2024-01-22 | CVE-2024-23750 | Code Injection vulnerability in Deepwisdom Metagpt MetaGPT through 0.6.4 allows the QaEngineer role to execute arbitrary code because RunCode.run_script() passes shell metacharacters to subprocess.Popen. | 8.8 |