GHSA-vm2f-46xc-5jc3
NoneCVSS
—
EPSS
—
Published
Nov 7, 2025
CISA due date
—
The record
AstrBot has an arbitrary file read vulnerability in function _encode_image_bs64
Affected packages
| Ecosystem | Package | Introduced | Fixed |
|---|---|---|---|
| PyPI | astrbot | 0 | No fix |
Related vulnerabilities
- CVE-2025-57697 AstrBot has an arbitrary file read vulnerability in function _encode_image_bs64 Same vulnerability
- CVE-2025-55449 AstrBotDevs AstrBot 3.5.15 has Advanced_System_for_Text_Response_and_Bot_Operations_Tool… Also affects astrbot
- GHSA-4m32-cjv7-f425 AstrBot is vulnerable to RCE with hard-coded JWT signing keys Also affects astrbot
- GHSA-xrj9-mw57-j34v AstrBot contains a directory traversal vulnerability Also affects astrbot
- CVE-2025-57698 AstrBot contains a directory traversal vulnerability Also affects astrbot
- CVE-2026-92824 A flaw was found in libmodulemd. CWE-125
- CVE-2026-114038 A flaw was found in device-mapper-multipath. CWE-125
- CVE-2026-112896 Pillow is a Python imaging library. CWE-125