CVE-2026-0764

all versions

GPT Academic upload Deserialization of Untrusted Data Remote Code Execution Vulnerability. This vulnerability allows remote attack

9.8CRITICAL

CVE-2026-0763

all versions

GPT Academic run_in_subprocess_wrapper_func Deserialization of Untrusted Data Remote Code Execution Vulnerability. This vulnerabil

9.8CRITICAL

CVE-2026-0762

all versions

GPT Academic stream_daas Deserialization of Untrusted Data Remote Code Execution Vulnerability. This vulnerability allows remote a

8.1HIGH

CVE-2025-10236

<= 3.91

A vulnerability has been found in binary-husky gpt_academic up to 3.91. Impacted is the function merge_tex_files_ of the file craz

4.3MEDIUM

CVE-2025-0183

all versions

A stored cross-site scripting (XSS) vulnerability exists in the Latex Proof-Reading Module of binary-husky/gpt_academic version 3.

5.4MEDIUM

CVE-2024-12392

all versions

A Server-Side Request Forgery (SSRF) vulnerability exists in binary-husky/gpt_academic version git 310122f. The application has a

6.5MEDIUM

CVE-2024-12391

all versions

A vulnerability in binary-husky/gpt_academic, as of commit 310122f, allows for a Regular Expression Denial of Service (ReDoS) atta

6.5MEDIUM

CVE-2024-12390

all versions

A vulnerability in binary-husky/gpt_academic version git 310122f allows for remote code execution. The application supports the ex

8.8HIGH

CVE-2024-12389

all versions

A path traversal vulnerability exists in binary-husky/gpt_academic version git 310122f. The application supports the extraction of

8.8HIGH

CVE-2024-12388

all versions

A vulnerability in binary-husky/gpt_academic version 310122f allows for a Regular Expression Denial of Service (ReDoS) attack. The

6.5MEDIUM

CVE-2024-12387

all versions

A vulnerability in the binary-husky/gpt_academic repository, as of commit git 3890467, allows an attacker to crash the server by u

6.5MEDIUM

CVE-2024-11039

< 3.91

A pickle deserialization vulnerability exists in the Latex English error correction plug-in function of binary-husky/gpt_academic

8.8HIGH

CVE-2024-11037

all versions

A path traversal vulnerability exists in binary-husky/gpt_academic at commit 679352d, which allows an attacker to bypass the block

6.5MEDIUM

CVE-2024-11033

all versions

A Denial of Service (DoS) vulnerability exists in the file upload feature of binary-husky/gpt_academic version 3.83. The vulnerabi

6.5MEDIUM

CVE-2024-11031

all versions

In version 3.83 of binary-husky/gpt_academic, a Server-Side Request Forgery (SSRF) vulnerability exists in the Markdown_Translate.

7.5HIGH

CVE-2024-11030

all versions

GPT Academic version 3.83 is vulnerable to a Server-Side Request Forgery (SSRF) vulnerability through its HotReload plugin functio

7.5HIGH

CVE-2024-10986

all versions

GPT Academic version 3.83 is vulnerable to a Local File Read (LFI) vulnerability through its HotReload function. This function can

8.8HIGH

CVE-2024-10956

all versions

GPT Academy version 3.83 in the binary-husky/gpt_academic repository is vulnerable to Cross-Site WebSocket Hijacking (CSWSH). This

7.1HIGH

CVE-2024-10954

all versions

In the manim plugin of binary-husky/gpt_academic, versions prior to the fix, a vulnerability exists due to improper handling of

8.8HIGH

CVE-2024-10950

<= 3.83

In binary-husky/gpt_academic version <= 3.83, the plugin CodeInterpreter is vulnerable to code injection caused by prompt inject

8.8HIGH

CVE-2024-10948

all versions

A vulnerability in the upload function of binary-husky/gpt_academic allows any user to read arbitrary files on the system, includi

6.5MEDIUM

CVE-2024-10819

all versions

A Cross-Site Request Forgery (CSRF) vulnerability in version 3.83 of binary-husky/gpt_academic allows an attacker to trick a user

8.8HIGH

CVE-2024-10812

all versions

An open redirect vulnerability exists in binary-husky/gpt_academic version 3.83. The vulnerability occurs when a user is redirecte

6.1MEDIUM

CVE-2024-10714

all versions

A vulnerability in binary-husky/gpt_academic version 3.83 allows an attacker to cause a Denial of Service (DoS) by adding excessiv

7.5HIGH

CVE-2025-25185

all versions

GPT Academic provides interactive interfaces for large language models. In 3.91 and earlier, GPT Academic does not properly accoun

7.5HIGH

CVE-2024-10101

all versions

A stored cross-site scripting (XSS) vulnerability exists in binary-husky/gpt_academic version 3.83. The vulnerability occurs at th

5.4MEDIUM

CVE-2024-10100

all versions

A path traversal vulnerability exists in binary-husky/gpt_academic version 3.83. The vulnerability is due to improper handling of

7.5HIGH

CVE-2024-31224

>= 3.64-1 and < 3.74

GPT Academic provides interactive interfaces for large language models. A vulnerability was found in gpt_academic versions 3.64 th

9.8CRITICAL

CVE-2023-33979

< 3.37

gpt_academic provides a graphical interface for ChatGPT/GLM. A vulnerability was found in gpt_academic 3.37 and prior. This issue

6.5MEDIUM