Vulnerabilities > Zylon
| DATE | CVE | VULNERABILITY TITLE | RISK |
|---|---|---|---|
| 2024-06-27 | CVE-2024-5935 | Cross-Site Request Forgery (CSRF) vulnerability in Zylon Privategpt 0.5.0 A Cross-Site Request Forgery (CSRF) vulnerability in version 0.5.0 of imartinez/privategpt allows an attacker to delete all uploaded files on the server. | 8.1 |
| 2024-06-06 | CVE-2024-5186 | Server-Side Request Forgery (SSRF) vulnerability in Zylon Privategpt 0.5.0 A Server-Side Request Forgery (SSRF) vulnerability exists in the file upload section of imartinez/privategpt version 0.5.0. | 8.6 |