uptrain vulnerabilities
4 known vulnerabilities in uptrain from Uptrain-ai. 4 are rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.
Latest first
- 7.4 High severity
uptrain: Improper Neutralization of Special Elements in Output Used by a Downstream Component
UpTrain is an open-source platform to evaluate and improve generative AI applications. In version 0.7.1 and prior, the `/new_run` endpoint is vulnerable to remote code execution via the `checks` and `metadata` parameters. Any user that has access to UpTrain an
- 7.4 High severity
uptrain: Improper Neutralization of Special Elements in Output Used by a Downstream Component
UpTrain is an open-source platform to evaluate and improve generative AI applications. In version 0.7.1 and prior, the `/add_prompts` endpoint is vulnerable to remote code execution via the `checks` and `metadata` parameters. Any user that has access to UpTrai
- 7.4 High severity
uptrain: Improper Neutralization of Special Elements in Output Used by a Downstream Component
UpTrain is an open-source platform to evaluate and improve generative AI applications. In version 0.7.1 and prior, the `/create_project` endpoint is vulnerable to remote code execution via the `checks` and `metadata` parameters. Any user that has access to UpT
- 7.7 High severity
uptrain: Improper Authentication
UpTrain is an open-source platform to evaluate and improve generative AI applications. In version 0.7.1 and prior, the UpTrain backend creates a new default user with a static username, where the username is also used as the default API key. The UpTrain backen