--- title: "Security digest: March 20, 2025" url: https://erroneo.us/security/2025-03-20/ description: "March 20, 2025 vulnerability digest: 22 critical advisories (PyPI, Go, Maven). What to patch and who can relax." type: security-digest-day section: "Security Digest" date_published: 2025-03-20 date_modified: 2025-03-20 publisher: erroneo.us author: erroneo.us Security Desk license: All rights reserved. Quote with attribution and a link. --- # Security digest: March 20, 2025 22 critical advisories. ## Take stock - PyPI: 21 critical advisories ( llama-index-packs-finchat , dbgpt , vllm , horovod , agentscope , h2o , bentoml , aim …). Check with pip-audit (or: pip show ) . - Go: 1 critical advisory ( github.com/kcp-dev/kcp ). Check with govulncheck ./... . - Maven: 1 critical advisory ( ai.h2o:h2o-core ). Check with mvn dependency:tree -Dincludes=: . - None of it touches your stack? Then there is nothing to do today. That is a result, not a failure to read carefully. ## Known exploited (CISA KEV) None. ## Critical advisories - [CVE-2024-12909](https://erroneo.us/security/cve/CVE-2024-12909/index.md) llama-index-packs-finchat SQL Injection vulnerability — PyPI llama-index-packs-finchat <= 0.3.0 → no fix - [CVE-2025-29922](https://erroneo.us/security/cve/CVE-2025-29922/index.md) kcp allows unauthorized creation and deletion of objects in arbitrary workspaces through APIExport Virtual Workspace — Go github.com/kcp-dev/kcp < 0.26.3 → 0.26.3 - [CVE-2024-10835](https://erroneo.us/security/cve/CVE-2024-10835/index.md) DB-GPT is vulnerable to SQL Injection attacks from unauthenticated users — PyPI dbgpt < 0.7.1 → 0.7.1 - [CVE-2024-9052](https://erroneo.us/security/cve/CVE-2024-9052/index.md) vLLM deserialization vulnerability in vllm.distributed.GroupCoordinator.recv_object — PyPI vllm <= 0.8.1 → no fix - [CVE-2024-10190](https://erroneo.us/security/cve/CVE-2024-10190/index.md) Horovod Vulnerable to Command Injection — PyPI horovod <= 0.28.1 → no fix - [CVE-2024-8551](https://erroneo.us/security/cve/CVE-2024-8551/index.md) AgentScope path traversal vulnerability in save-workflow — PyPI agentscope <= 0.1.1 → no fix - [CVE-2024-10833](https://erroneo.us/security/cve/CVE-2024-10833/index.md) DB-GPT Absolute Path Traversal in knowledge/{space_name}/document/upload — PyPI dbgpt < 0.6.2 → 0.6.2 - [CVE-2024-10831](https://erroneo.us/security/cve/CVE-2024-10831/index.md) DB-GPT Absolute Path Traversal vulnerability — PyPI dbgpt <= 0.6.0 → no fix - [CVE-2024-10553](https://erroneo.us/security/cve/CVE-2024-10553/index.md) H2O Deserialization of Untrusted Data Vulnerability — PyPI h2o < 3.46.0.6 → 3.46.0.6; Maven ai.h2o:h2o-core < 3.46.0.6 → 3.46.0.6 - [CVE-2024-9053](https://erroneo.us/security/cve/CVE-2024-9053/index.md) vLLM allows Remote Code Execution by Pickle Deserialization via AsyncEngineRPCServer() RPC server entrypoints — PyPI vllm <= 0.6.0 → no fix - [CVE-2024-8537](https://erroneo.us/security/cve/CVE-2024-8537/index.md) AgentScope path traversal vulnerability — PyPI agentscope <= 0.1.1 → no fix - [CVE-2024-8502](https://erroneo.us/security/cve/CVE-2024-8502/index.md) AgentScope Deserialization Vulnerability — PyPI agentscope <= 0.0.6a3 → no fix - [CVE-2024-9070](https://erroneo.us/security/cve/CVE-2024-9070/index.md) BentoML deserialization vulnerability — PyPI bentoml <= 1.4.5 → no fix - [CVE-2024-10901](https://erroneo.us/security/cve/CVE-2024-10901/index.md) DB-GPT Arbitrary File Write vulnerability — PyPI dbgpt <= 0.6.3 → no fix - [CVE-2024-6829](https://erroneo.us/security/cve/CVE-2024-6829/index.md) Aim External Control of File Name or Path vulnerability — PyPI aim <= 3.19.3 → no fix - [CVE-2024-9701](https://erroneo.us/security/cve/CVE-2024-9701/index.md) Kedro deserialization vulnerability — PyPI kedro < 0.19.9 → 0.19.9 - [CVE-2024-11041](https://erroneo.us/security/cve/CVE-2024-11041/index.md) vLLM Deserialization of Untrusted Data vulnerability — PyPI vllm <= 0.6.2 → no fix - [CVE-2024-8769](https://erroneo.us/security/cve/CVE-2024-8769/index.md) Aim path traversal in LockManager.release_locks — PyPI aim >= 3.15.0, <= 3.27.0 → no fix - [CVE-2024-8019](https://erroneo.us/security/cve/CVE-2024-8019/index.md) PyTorch Lightning path traversal vulnerability — PyPI pytorch-lightning < 2.4.0 → 2.4.0 - [CVE-2024-10902](https://erroneo.us/security/cve/CVE-2024-10902/index.md) DB-GPT vulnerable to Arbitrary File Upload with Path Traversal — PyPI dbgpt <= 0.6.0 → no fix - [CVE-2024-11958](https://erroneo.us/security/cve/CVE-2024-11958/index.md) LlamaIndex Retrievers Integration: DuckDBRetriever SQL Injection — PyPI llama-index-retrievers-duckdb-retriever < 0.4.0 → 0.4.0 - [CVE-2024-11042](https://erroneo.us/security/cve/CVE-2024-11042/index.md) InvokeAI Arbitrary File Deletion vulnerability — PyPI InvokeAI < 5.3.0rc1 → 5.3.0rc1 --- Source page: https://erroneo.us/security/2025-03-20/ · Security Digest: https://erroneo.us/security/ · More: https://erroneo.us/llms.txt