| Package | Affected versions | Patched versions |
|---|---|---|
| docsgpt | = 0.15.0 |
DocsGPT is a GPT-powered chat for documentation. From version 0.15.0 to before version 0.16.0, an attacker accessing both the official DocsGPT website or any local and public deployment, can craft a malicious payload bypassing the "MCP test" behavior to achieve arbitrary remote code execution (RCE). This issue has been patched in version 0.16.0.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free