Improper Input Validation Affecting agixt package, versions [,1.5.17)
Do your applications use this vulnerable package?
In a few clicks we can analyze your entire application and see what components are vulnerable in your application, and suggest you quick fixes.
Test your applications- Snyk ID SNYK-PYTHON-AGIXT-7210250
- published 5 Jun 2024
- disclosed 1 Jun 2024
- credit Unknown
How to fix?
Upgrade agixt to version 1.5.17 or higher.
Overview
agixt is an An Artificial Intelligence Automation Platform. AI Instruction management from various providers, has an adaptive memory, and a versatile plugin system with many commands including web browsing. Supports many AI providers and models and growing support every day.
Affected versions of this package are vulnerable to Improper Input Validation where maliciously crafted inputs could inject unintended commands or data into the application's context.
References
CVSS Scores
version 3.1