VulnerableCode Package Details - pkg:pypi/metagpt@0

Staging Environment: Content and features may be unstable or change without notice.

Search for packages

Package details: pkg:pypi/metagpt@0

Essentials
History (2)

purl	pkg:pypi/metagpt@0
Tags	Ghost

Next non-vulnerable version	None.
Latest non-vulnerable version	None.
Risk	4.0

Vulnerabilities affecting this package (1)

Vulnerability	Summary	Fixed by
VCID-vf3p-g7qx-tufn Aliases: CVE-2024-23750 GHSA-g7ph-8423-pf4j PYSEC-2024-9	MetaGPT through 0.6.4 allows the QaEngineer role to execute arbitrary code because RunCode.run_script() passes shell metacharacters to subprocess.Popen.	0.6.5 Affected by 1 other vulnerability. This version is affected by these other vulnerabilities: {{ fixed_by_vuln.vulnerability_id }}

Vulnerabilities fixed by this package (0)

Vulnerability	Summary	Aliases
This package is not known to fix vulnerabilities.

Date	Actor	Action	Vulnerability	Source	VulnerableCode Version
2026-05-31T01:01:51.553396+00:00	GHSA Importer	Affected by	VCID-vf3p-g7qx-tufn	https://github.com/advisories/GHSA-g7ph-8423-pf4j	38.6.0
2026-05-30T21:03:06.912020+00:00	GitLab Importer	Affected by	VCID-vf3p-g7qx-tufn	https://gitlab.com/gitlab-org/advisories-community/-/blob/main/pypi/metagpt/CVE-2024-23750.yml	38.6.0