metagpt@0.6.4 vulnerabilities

The Multi-Agent Framework

Known vulnerabilities in the metagpt package. This does not include vulnerabilities belonging to this package’s dependencies.

Automatically find and fix vulnerabilities affecting your projects. Snyk scans for vulnerabilities and provides fixes for free.

Vulnerability	Vulnerable Version
M OS Command Injection metagpt is a The Multi-Agent Framework Affected versions of this package are vulnerable to OS Command Injection via the `RunCode.run_script()` method. An attacker with the QaEngineer role can execute arbitrary commands on the system by injecting shell metacharacters into the input parameters. How to fix OS Command Injection? There is no fixed version for `metagpt`.	[0,)