| Package | Affected versions | Patched versions |
|---|---|---|
| agentscope | ≤ 0.0.4 | |
| agentscope | = 0.0.4 |
A path traversal vulnerability exists in modelscope/agentscope version v.0.0.4. The API endpoint /api/file does not properly sanitize the path parameter, allowing an attacker to read arbitrary files on the server.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free