Digest · Thursday
Security digest: March 20, 2025
22 critical advisories.
All digests · RSS · Markdown
Take stock
- PyPI: 21 critical advisories (
llama-index-packs-finchat,dbgpt,vllm,horovod,agentscope,h2o,bentoml,aim…). Check withpip-audit (or: pip show <package>). - Go: 1 critical advisory (
github.com/kcp-dev/kcp). Check withgovulncheck ./.... - Maven: 1 critical advisory (
ai.h2o:h2o-core). Check withmvn dependency:tree -Dincludes=<groupId>:<artifactId>. - None of it touches your stack? Then there is nothing to do today. That is a result, not a failure to read carefully.
Known exploited (CISA KEV) 0
Added to CISA’s catalog on this day: confirmed exploitation in the wild. Due date = CISA’s deadline for US federal agencies.
None.
Critical advisories by ecosystem 22
GitHub-reviewed advisories rated critical, published this day (Pacific time).
PyPI 21
Check: pip-audit (or: pip show <package>)
- llama-index-packs-finchat SQL Injection vulnerability CVE-2024-12909 CVSS 10.0 Critical
llama-index-packs-finchat<= 0.3.0 → no fix listed - DB-GPT is vulnerable to SQL Injection attacks from unauthenticated users CVE-2024-10835 CVSS 9.1 Critical
dbgpt< 0.7.1 → fixed in 0.7.1 - vLLM deserialization vulnerability in vllm.distributed.GroupCoordinator.recv_object CVE-2024-9052 CVSS 9.8 Critical
vllm<= 0.8.1 → no fix listed - Horovod Vulnerable to Command Injection CVE-2024-10190 CVSS 9.8 Critical
horovod<= 0.28.1 → no fix listed - AgentScope path traversal vulnerability in save-workflow CVE-2024-8551 CVSS 9.1 Critical
agentscope<= 0.1.1 → no fix listed - DB-GPT Absolute Path Traversal in knowledge/{space_name}/document/upload CVE-2024-10833 CVSS 9.1 Critical
dbgpt< 0.6.2 → fixed in 0.6.2 - DB-GPT Absolute Path Traversal vulnerability CVE-2024-10831 CVSS 9.1 Critical
dbgpt<= 0.6.0 → no fix listed - H2O Deserialization of Untrusted Data Vulnerability CVE-2024-10553 CVSS 9.8 Critical
h2o< 3.46.0.6 → fixed in 3.46.0.6;ai.h2o:h2o-core< 3.46.0.6 → fixed in 3.46.0.6 - vLLM allows Remote Code Execution by Pickle Deserialization via AsyncEngineRPCServer() RPC server entrypoints CVE-2024-9053 CVSS 9.8 Critical
vllm<= 0.6.0 → no fix listed - AgentScope path traversal vulnerability CVE-2024-8537 CVSS 9.1 Critical
agentscope<= 0.1.1 → no fix listed - AgentScope Deserialization Vulnerability CVE-2024-8502 CVSS 9.8 Critical
agentscope<= 0.0.6a3 → no fix listed - BentoML deserialization vulnerability CVE-2024-9070 CVSS 9.8 Critical
bentoml<= 1.4.5 → no fix listed - DB-GPT Arbitrary File Write vulnerability CVE-2024-10901 CVSS 9.1 Critical
dbgpt<= 0.6.3 → no fix listed - Aim External Control of File Name or Path vulnerability CVE-2024-6829 CVSS 9.1 Critical
aim<= 3.19.3 → no fix listed - Kedro deserialization vulnerability CVE-2024-9701 CVSS 9.8 Critical
kedro< 0.19.9 → fixed in 0.19.9 - vLLM Deserialization of Untrusted Data vulnerability CVE-2024-11041 CVSS 9.8 Critical
vllm<= 0.6.2 → no fix listed - Aim path traversal in LockManager.release_locks CVE-2024-8769 CVSS 9.1 Critical
aim>= 3.15.0, <= 3.27.0 → no fix listed - PyTorch Lightning path traversal vulnerability CVE-2024-8019 CVSS 9.1 Critical
pytorch-lightning< 2.4.0 → fixed in 2.4.0 - DB-GPT vulnerable to Arbitrary File Upload with Path Traversal CVE-2024-10902 CVSS 9.1 Critical
dbgpt<= 0.6.0 → no fix listed - LlamaIndex Retrievers Integration: DuckDBRetriever SQL Injection CVE-2024-11958 CVSS 9.8 Critical
llama-index-retrievers-duckdb-retriever< 0.4.0 → fixed in 0.4.0 - InvokeAI Arbitrary File Deletion vulnerability CVE-2024-11042 CVSS 9.1 Critical
InvokeAI< 5.3.0rc1 → fixed in 5.3.0rc1
Go 1
Check: govulncheck ./...
- kcp allows unauthorized creation and deletion of objects in arbitrary workspaces through APIExport Virtual Workspace CVE-2025-29922 CVSS 9.6 Critical
github.com/kcp-dev/kcp< 0.26.3 → fixed in 0.26.3
Maven 1
Check: mvn dependency:tree -Dincludes=<groupId>:<artifactId>
- H2O Deserialization of Untrusted Data Vulnerability CVE-2024-10553 CVSS 9.8 Critical
h2o< 3.46.0.6 → fixed in 3.46.0.6;ai.h2o:h2o-core< 3.46.0.6 → fixed in 3.46.0.6