{"url":"http://public2.vulnerablecode.io/api/vulnerabilities/75722?format=json","vulnerability_id":"VCID-bk2m-utzq-33fs","summary":"A vulnerability was determined in FoundationAgents MetaGPT up to 0.8.1. The impacted element is the function evaluateCode of the file metagpt/environment/minecraft/mineflayer/index.js of the component Mineflayer HTTP API. Executing a manipulation can lead to cross-site request forgery. The attack may be performed from remote. The exploit has been publicly disclosed and may be utilized. The project was informed of the problem early through an issue report but has not responded yet.","aliases":[{"alias":"CVE-2026-6109"},{"alias":"GHSA-w287-wwhf-95vv"}],"fixed_packages":[],"affected_packages":[{"url":"http://public2.vulnerablecode.io/api/packages/81907?format=json","purl":"pkg:pypi/metagpt@0.1","is_vulnerable":true,"affected_by_vulnerabilities":[{"vulnerability":"VCID-axr8-3zgg-6bda"},{"vulnerability":"VCID-bk2m-utzq-33fs"},{"vulnerability":"VCID-csgu-69ez-hfem"},{"vulnerability":"VCID-fw8d-dp6r-gben"},{"vulnerability":"VCID-g9x7-gy31-w3ec"},{"vulnerability":"VCID-hq6v-dzby-sqcq"},{"vulnerability":"VCID-tj1z-gnfk-27c5"},{"vulnerability":"VCID-u2xk-wspz-1bfm"},{"vulnerability":"VCID-vtz5-5t2s-wbe7"}],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:pypi/metagpt@0.1"},{"url":"http://public2.vulnerablecode.io/api/packages/81908?format=json","purl":"pkg:pypi/metagpt@0.3.0","is_vulnerable":true,"affected_by_vulnerabilities":[{"vulnerability":"VCID-axr8-3zgg-6bda"},{"vulnerability":"VCID-bk2m-utzq-33fs"},{"vulnerability":"VCID-csgu-69ez-hfem"},{"vulnerability":"VCID-fw8d-dp6r-gben"},{"vulnerability":"VCID-g9x7-gy31-w3ec"},{"vulnerability":"VCID-hq6v-dzby-sqcq"},{"vulnerability":"VCID-tj1z-gnfk-27c5"},{"vulnerability":"VCID-u2xk-wspz-1bfm"},{"vulnerability":"VCID-vtz5-5t2s-wbe7"}],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:pypi/metagpt@0.3.0"},{"url":"http://public2.vulnerablecode.io/api/packages/81909?format=json","purl":"pkg:pypi/metagpt@0.4.0","is_vulnerable":true,"affected_by_vulnerabilities":[{"vulnerability":"VCID-axr8-3zgg-6bda"},{"vulnerability":"VCID-bk2m-utzq-33fs"},{"vulnerability":"VCID-csgu-69ez-hfem"},{"vulnerability":"VCID-fw8d-dp6r-gben"},{"vulnerability":"VCID-g9x7-gy31-w3ec"},{"vulnerability":"VCID-hq6v-dzby-sqcq"},{"vulnerability":"VCID-tj1z-gnfk-27c5"},{"vulnerability":"VCID-u2xk-wspz-1bfm"},{"vulnerability":"VCID-vtz5-5t2s-wbe7"}],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:pypi/metagpt@0.4.0"},{"url":"http://public2.vulnerablecode.io/api/packages/81910?format=json","purl":"pkg:pypi/metagpt@0.5.0","is_vulnerable":true,"affected_by_vulnerabilities":[{"vulnerability":"VCID-axr8-3zgg-6bda"},{"vulnerability":"VCID-bk2m-utzq-33fs"},{"vulnerability":"VCID-csgu-69ez-hfem"},{"vulnerability":"VCID-fw8d-dp6r-gben"},{"vulnerability":"VCID-g9x7-gy31-w3ec"},{"vulnerability":"VCID-hq6v-dzby-sqcq"},{"vulnerability":"VCID-tj1z-gnfk-27c5"},{"vulnerability":"VCID-u2xk-wspz-1bfm"},{"vulnerability":"VCID-vtz5-5t2s-wbe7"}],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:pypi/metagpt@0.5.0"},{"url":"http://public2.vulnerablecode.io/api/packages/81911?format=json","purl":"pkg:pypi/metagpt@0.5.1","is_vulnerable":true,"affected_by_vulnerabilities":[{"vulnerability":"VCID-axr8-3zgg-6bda"},{"vulnerability":"VCID-bk2m-utzq-33fs"},{"vulnerability":"VCID-csgu-69ez-hfem"},{"vulnerability":"VCID-fw8d-dp6r-gben"},{"vulnerability":"VCID-g9x7-gy31-w3ec"},{"vulnerability":"VCID-hq6v-dzby-sqcq"},{"vulnerability":"VCID-tj1z-gnfk-27c5"},{"vulnerability":"VCID-u2xk-wspz-1bfm"},{"vulnerability":"VCID-vtz5-5t2s-wbe7"}],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:pypi/metagpt@0.5.1"},{"url":"http://public2.vulnerablecode.io/api/packages/81912?format=json","purl":"pkg:pypi/metagpt@0.5.2","is_vulnerable":true,"affected_by_vulnerabilities":[{"vulnerability":"VCID-axr8-3zgg-6bda"},{"vulnerability":"VCID-bk2m-utzq-33fs"},{"vulnerability":"VCID-csgu-69ez-hfem"},{"vulnerability":"VCID-fw8d-dp6r-gben"},{"vulnerability":"VCID-g9x7-gy31-w3ec"},{"vulnerability":"VCID-hq6v-dzby-sqcq"},{"vulnerability":"VCID-tj1z-gnfk-27c5"},{"vulnerability":"VCID-u2xk-wspz-1bfm"},{"vulnerability":"VCID-vtz5-5t2s-wbe7"}],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:pypi/metagpt@0.5.2"},{"url":"http://public2.vulnerablecode.io/api/packages/81913?format=json","purl":"pkg:pypi/metagpt@0.6.0","is_vulnerable":true,"affected_by_vulnerabilities":[{"vulnerability":"VCID-axr8-3zgg-6bda"},{"vulnerability":"VCID-bk2m-utzq-33fs"},{"vulnerability":"VCID-csgu-69ez-hfem"},{"vulnerability":"VCID-fw8d-dp6r-gben"},{"vulnerability":"VCID-g9x7-gy31-w3ec"},{"vulnerability":"VCID-hq6v-dzby-sqcq"},{"vulnerability":"VCID-tj1z-gnfk-27c5"},{"vulnerability":"VCID-u2xk-wspz-1bfm"},{"vulnerability":"VCID-vtz5-5t2s-wbe7"}],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:pypi/metagpt@0.6.0"},{"url":"http://public2.vulnerablecode.io/api/packages/81914?format=json","purl":"pkg:pypi/metagpt@0.6.1","is_vulnerable":true,"affected_by_vulnerabilities":[{"vulnerability":"VCID-axr8-3zgg-6bda"},{"vulnerability":"VCID-bk2m-utzq-33fs"},{"vulnerability":"VCID-csgu-69ez-hfem"},{"vulnerability":"VCID-fw8d-dp6r-gben"},{"vulnerability":"VCID-g9x7-gy31-w3ec"},{"vulnerability":"VCID-hq6v-dzby-sqcq"},{"vulnerability":"VCID-tj1z-gnfk-27c5"},{"vulnerability":"VCID-u2xk-wspz-1bfm"},{"vulnerability":"VCID-vtz5-5t2s-wbe7"}],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:pypi/metagpt@0.6.1"},{"url":"http://public2.vulnerablecode.io/api/packages/81915?format=json","purl":"pkg:pypi/metagpt@0.6.2","is_vulnerable":true,"affected_by_vulnerabilities":[{"vulnerability":"VCID-axr8-3zgg-6bda"},{"vulnerability":"VCID-bk2m-utzq-33fs"},{"vulnerability":"VCID-csgu-69ez-hfem"},{"vulnerability":"VCID-fw8d-dp6r-gben"},{"vulnerability":"VCID-g9x7-gy31-w3ec"},{"vulnerability":"VCID-hq6v-dzby-sqcq"},{"vulnerability":"VCID-tj1z-gnfk-27c5"},{"vulnerability":"VCID-u2xk-wspz-1bfm"},{"vulnerability":"VCID-vtz5-5t2s-wbe7"}],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:pypi/metagpt@0.6.2"},{"url":"http://public2.vulnerablecode.io/api/packages/81916?format=json","purl":"pkg:pypi/metagpt@0.6.3","is_vulnerable":true,"affected_by_vulnerabilities":[{"vulnerability":"VCID-axr8-3zgg-6bda"},{"vulnerability":"VCID-bk2m-utzq-33fs"},{"vulnerability":"VCID-csgu-69ez-hfem"},{"vulnerability":"VCID-fw8d-dp6r-gben"},{"vulnerability":"VCID-g9x7-gy31-w3ec"},{"vulnerability":"VCID-hq6v-dzby-sqcq"},{"vulnerability":"VCID-tj1z-gnfk-27c5"},{"vulnerability":"VCID-u2xk-wspz-1bfm"},{"vulnerability":"VCID-vtz5-5t2s-wbe7"}],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:pypi/metagpt@0.6.3"},{"url":"http://public2.vulnerablecode.io/api/packages/81917?format=json","purl":"pkg:pypi/metagpt@0.6.4","is_vulnerable":true,"affected_by_vulnerabilities":[{"vulnerability":"VCID-axr8-3zgg-6bda"},{"vulnerability":"VCID-bk2m-utzq-33fs"},{"vulnerability":"VCID-csgu-69ez-hfem"},{"vulnerability":"VCID-fw8d-dp6r-gben"},{"vulnerability":"VCID-g9x7-gy31-w3ec"},{"vulnerability":"VCID-hq6v-dzby-sqcq"},{"vulnerability":"VCID-tj1z-gnfk-27c5"},{"vulnerability":"VCID-u2xk-wspz-1bfm"},{"vulnerability":"VCID-vtz5-5t2s-wbe7"}],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:pypi/metagpt@0.6.4"},{"url":"http://public2.vulnerablecode.io/api/packages/81918?format=json","purl":"pkg:pypi/metagpt@0.6.5","is_vulnerable":true,"affected_by_vulnerabilities":[{"vulnerability":"VCID-axr8-3zgg-6bda"},{"vulnerability":"VCID-bk2m-utzq-33fs"},{"vulnerability":"VCID-csgu-69ez-hfem"},{"vulnerability":"VCID-fw8d-dp6r-gben"},{"vulnerability":"VCID-g9x7-gy31-w3ec"},{"vulnerability":"VCID-hq6v-dzby-sqcq"},{"vulnerability":"VCID-tj1z-gnfk-27c5"},{"vulnerability":"VCID-u2xk-wspz-1bfm"},{"vulnerability":"VCID-vtz5-5t2s-wbe7"}],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:pypi/metagpt@0.6.5"},{"url":"http://public2.vulnerablecode.io/api/packages/28510?format=json","purl":"pkg:pypi/metagpt@0.6.6","is_vulnerable":true,"affected_by_vulnerabilities":[{"vulnerability":"VCID-axr8-3zgg-6bda"},{"vulnerability":"VCID-bk2m-utzq-33fs"},{"vulnerability":"VCID-csgu-69ez-hfem"},{"vulnerability":"VCID-fw8d-dp6r-gben"},{"vulnerability":"VCID-g9x7-gy31-w3ec"},{"vulnerability":"VCID-hq6v-dzby-sqcq"},{"vulnerability":"VCID-tj1z-gnfk-27c5"},{"vulnerability":"VCID-u2xk-wspz-1bfm"},{"vulnerability":"VCID-vtz5-5t2s-wbe7"}],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:pypi/metagpt@0.6.6"},{"url":"http://public2.vulnerablecode.io/api/packages/1002248?format=json","purl":"pkg:pypi/metagpt@0.6.7","is_vulnerable":true,"affected_by_vulnerabilities":[{"vulnerability":"VCID-axr8-3zgg-6bda"},{"vulnerability":"VCID-bk2m-utzq-33fs"},{"vulnerability":"VCID-csgu-69ez-hfem"},{"vulnerability":"VCID-fw8d-dp6r-gben"},{"vulnerability":"VCID-g9x7-gy31-w3ec"},{"vulnerability":"VCID-tj1z-gnfk-27c5"},{"vulnerability":"VCID-u2xk-wspz-1bfm"},{"vulnerability":"VCID-vtz5-5t2s-wbe7"}],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:pypi/metagpt@0.6.7"},{"url":"http://public2.vulnerablecode.io/api/packages/1002249?format=json","purl":"pkg:pypi/metagpt@0.6.8","is_vulnerable":true,"affected_by_vulnerabilities":[{"vulnerability":"VCID-axr8-3zgg-6bda"},{"vulnerability":"VCID-bk2m-utzq-33fs"},{"vulnerability":"VCID-csgu-69ez-hfem"},{"vulnerability":"VCID-fw8d-dp6r-gben"},{"vulnerability":"VCID-g9x7-gy31-w3ec"},{"vulnerability":"VCID-tj1z-gnfk-27c5"},{"vulnerability":"VCID-u2xk-wspz-1bfm"},{"vulnerability":"VCID-vtz5-5t2s-wbe7"}],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:pypi/metagpt@0.6.8"},{"url":"http://public2.vulnerablecode.io/api/packages/1002250?format=json","purl":"pkg:pypi/metagpt@0.6.9","is_vulnerable":true,"affected_by_vulnerabilities":[{"vulnerability":"VCID-axr8-3zgg-6bda"},{"vulnerability":"VCID-bk2m-utzq-33fs"},{"vulnerability":"VCID-csgu-69ez-hfem"},{"vulnerability":"VCID-fw8d-dp6r-gben"},{"vulnerability":"VCID-g9x7-gy31-w3ec"},{"vulnerability":"VCID-tj1z-gnfk-27c5"},{"vulnerability":"VCID-u2xk-wspz-1bfm"},{"vulnerability":"VCID-vtz5-5t2s-wbe7"}],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:pypi/metagpt@0.6.9"},{"url":"http://public2.vulnerablecode.io/api/packages/1002251?format=json","purl":"pkg:pypi/metagpt@0.6.10","is_vulnerable":true,"affected_by_vulnerabilities":[{"vulnerability":"VCID-axr8-3zgg-6bda"},{"vulnerability":"VCID-bk2m-utzq-33fs"},{"vulnerability":"VCID-csgu-69ez-hfem"},{"vulnerability":"VCID-fw8d-dp6r-gben"},{"vulnerability":"VCID-g9x7-gy31-w3ec"},{"vulnerability":"VCID-tj1z-gnfk-27c5"},{"vulnerability":"VCID-u2xk-wspz-1bfm"},{"vulnerability":"VCID-vtz5-5t2s-wbe7"}],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:pypi/metagpt@0.6.10"},{"url":"http://public2.vulnerablecode.io/api/packages/1002252?format=json","purl":"pkg:pypi/metagpt@0.6.11","is_vulnerable":true,"affected_by_vulnerabilities":[{"vulnerability":"VCID-axr8-3zgg-6bda"},{"vulnerability":"VCID-bk2m-utzq-33fs"},{"vulnerability":"VCID-csgu-69ez-hfem"},{"vulnerability":"VCID-fw8d-dp6r-gben"},{"vulnerability":"VCID-g9x7-gy31-w3ec"},{"vulnerability":"VCID-tj1z-gnfk-27c5"},{"vulnerability":"VCID-u2xk-wspz-1bfm"},{"vulnerability":"VCID-vtz5-5t2s-wbe7"}],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:pypi/metagpt@0.6.11"},{"url":"http://public2.vulnerablecode.io/api/packages/1002253?format=json","purl":"pkg:pypi/metagpt@0.6.12","is_vulnerable":true,"affected_by_vulnerabilities":[{"vulnerability":"VCID-axr8-3zgg-6bda"},{"vulnerability":"VCID-bk2m-utzq-33fs"},{"vulnerability":"VCID-csgu-69ez-hfem"},{"vulnerability":"VCID-fw8d-dp6r-gben"},{"vulnerability":"VCID-g9x7-gy31-w3ec"},{"vulnerability":"VCID-tj1z-gnfk-27c5"},{"vulnerability":"VCID-u2xk-wspz-1bfm"},{"vulnerability":"VCID-vtz5-5t2s-wbe7"}],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:pypi/metagpt@0.6.12"},{"url":"http://public2.vulnerablecode.io/api/packages/1002254?format=json","purl":"pkg:pypi/metagpt@0.6.13","is_vulnerable":true,"affected_by_vulnerabilities":[{"vulnerability":"VCID-axr8-3zgg-6bda"},{"vulnerability":"VCID-bk2m-utzq-33fs"},{"vulnerability":"VCID-csgu-69ez-hfem"},{"vulnerability":"VCID-fw8d-dp6r-gben"},{"vulnerability":"VCID-g9x7-gy31-w3ec"},{"vulnerability":"VCID-tj1z-gnfk-27c5"},{"vulnerability":"VCID-u2xk-wspz-1bfm"},{"vulnerability":"VCID-vtz5-5t2s-wbe7"}],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:pypi/metagpt@0.6.13"},{"url":"http://public2.vulnerablecode.io/api/packages/1002255?format=json","purl":"pkg:pypi/metagpt@0.7.0","is_vulnerable":true,"affected_by_vulnerabilities":[{"vulnerability":"VCID-axr8-3zgg-6bda"},{"vulnerability":"VCID-bk2m-utzq-33fs"},{"vulnerability":"VCID-csgu-69ez-hfem"},{"vulnerability":"VCID-fw8d-dp6r-gben"},{"vulnerability":"VCID-g9x7-gy31-w3ec"},{"vulnerability":"VCID-tj1z-gnfk-27c5"},{"vulnerability":"VCID-u2xk-wspz-1bfm"},{"vulnerability":"VCID-vtz5-5t2s-wbe7"}],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:pypi/metagpt@0.7.0"},{"url":"http://public2.vulnerablecode.io/api/packages/1002256?format=json","purl":"pkg:pypi/metagpt@0.7.1","is_vulnerable":true,"affected_by_vulnerabilities":[{"vulnerability":"VCID-axr8-3zgg-6bda"},{"vulnerability":"VCID-bk2m-utzq-33fs"},{"vulnerability":"VCID-csgu-69ez-hfem"},{"vulnerability":"VCID-fw8d-dp6r-gben"},{"vulnerability":"VCID-g9x7-gy31-w3ec"},{"vulnerability":"VCID-tj1z-gnfk-27c5"},{"vulnerability":"VCID-u2xk-wspz-1bfm"},{"vulnerability":"VCID-vtz5-5t2s-wbe7"}],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:pypi/metagpt@0.7.1"},{"url":"http://public2.vulnerablecode.io/api/packages/1002257?format=json","purl":"pkg:pypi/metagpt@0.7.2","is_vulnerable":true,"affected_by_vulnerabilities":[{"vulnerability":"VCID-axr8-3zgg-6bda"},{"vulnerability":"VCID-bk2m-utzq-33fs"},{"vulnerability":"VCID-csgu-69ez-hfem"},{"vulnerability":"VCID-fw8d-dp6r-gben"},{"vulnerability":"VCID-g9x7-gy31-w3ec"},{"vulnerability":"VCID-tj1z-gnfk-27c5"},{"vulnerability":"VCID-u2xk-wspz-1bfm"},{"vulnerability":"VCID-vtz5-5t2s-wbe7"}],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:pypi/metagpt@0.7.2"},{"url":"http://public2.vulnerablecode.io/api/packages/1002258?format=json","purl":"pkg:pypi/metagpt@0.7.3","is_vulnerable":true,"affected_by_vulnerabilities":[{"vulnerability":"VCID-axr8-3zgg-6bda"},{"vulnerability":"VCID-bk2m-utzq-33fs"},{"vulnerability":"VCID-csgu-69ez-hfem"},{"vulnerability":"VCID-fw8d-dp6r-gben"},{"vulnerability":"VCID-g9x7-gy31-w3ec"},{"vulnerability":"VCID-tj1z-gnfk-27c5"},{"vulnerability":"VCID-u2xk-wspz-1bfm"},{"vulnerability":"VCID-vtz5-5t2s-wbe7"}],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:pypi/metagpt@0.7.3"},{"url":"http://public2.vulnerablecode.io/api/packages/1002259?format=json","purl":"pkg:pypi/metagpt@0.7.4","is_vulnerable":true,"affected_by_vulnerabilities":[{"vulnerability":"VCID-axr8-3zgg-6bda"},{"vulnerability":"VCID-bk2m-utzq-33fs"},{"vulnerability":"VCID-csgu-69ez-hfem"},{"vulnerability":"VCID-fw8d-dp6r-gben"},{"vulnerability":"VCID-g9x7-gy31-w3ec"},{"vulnerability":"VCID-tj1z-gnfk-27c5"},{"vulnerability":"VCID-u2xk-wspz-1bfm"},{"vulnerability":"VCID-vtz5-5t2s-wbe7"}],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:pypi/metagpt@0.7.4"},{"url":"http://public2.vulnerablecode.io/api/packages/1002260?format=json","purl":"pkg:pypi/metagpt@0.7.6","is_vulnerable":true,"affected_by_vulnerabilities":[{"vulnerability":"VCID-axr8-3zgg-6bda"},{"vulnerability":"VCID-bk2m-utzq-33fs"},{"vulnerability":"VCID-csgu-69ez-hfem"},{"vulnerability":"VCID-fw8d-dp6r-gben"},{"vulnerability":"VCID-g9x7-gy31-w3ec"},{"vulnerability":"VCID-tj1z-gnfk-27c5"},{"vulnerability":"VCID-u2xk-wspz-1bfm"},{"vulnerability":"VCID-vtz5-5t2s-wbe7"}],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:pypi/metagpt@0.7.6"},{"url":"http://public2.vulnerablecode.io/api/packages/1002261?format=json","purl":"pkg:pypi/metagpt@0.7.7","is_vulnerable":true,"affected_by_vulnerabilities":[{"vulnerability":"VCID-axr8-3zgg-6bda"},{"vulnerability":"VCID-bk2m-utzq-33fs"},{"vulnerability":"VCID-csgu-69ez-hfem"},{"vulnerability":"VCID-fw8d-dp6r-gben"},{"vulnerability":"VCID-g9x7-gy31-w3ec"},{"vulnerability":"VCID-tj1z-gnfk-27c5"},{"vulnerability":"VCID-u2xk-wspz-1bfm"},{"vulnerability":"VCID-vtz5-5t2s-wbe7"}],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:pypi/metagpt@0.7.7"},{"url":"http://public2.vulnerablecode.io/api/packages/1002262?format=json","purl":"pkg:pypi/metagpt@0.8.0","is_vulnerable":true,"affected_by_vulnerabilities":[{"vulnerability":"VCID-axr8-3zgg-6bda"},{"vulnerability":"VCID-bk2m-utzq-33fs"},{"vulnerability":"VCID-csgu-69ez-hfem"},{"vulnerability":"VCID-fw8d-dp6r-gben"},{"vulnerability":"VCID-g9x7-gy31-w3ec"},{"vulnerability":"VCID-tj1z-gnfk-27c5"},{"vulnerability":"VCID-u2xk-wspz-1bfm"},{"vulnerability":"VCID-vtz5-5t2s-wbe7"}],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:pypi/metagpt@0.8.0"},{"url":"http://public2.vulnerablecode.io/api/packages/1002263?format=json","purl":"pkg:pypi/metagpt@0.8.1","is_vulnerable":true,"affected_by_vulnerabilities":[{"vulnerability":"VCID-axr8-3zgg-6bda"},{"vulnerability":"VCID-bk2m-utzq-33fs"},{"vulnerability":"VCID-csgu-69ez-hfem"},{"vulnerability":"VCID-fw8d-dp6r-gben"},{"vulnerability":"VCID-g9x7-gy31-w3ec"},{"vulnerability":"VCID-tj1z-gnfk-27c5"},{"vulnerability":"VCID-u2xk-wspz-1bfm"},{"vulnerability":"VCID-vtz5-5t2s-wbe7"}],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:pypi/metagpt@0.8.1"},{"url":"http://public2.vulnerablecode.io/api/packages/374275?format=json","purl":"pkg:pypi/metagpt@0.8.2","is_vulnerable":true,"affected_by_vulnerabilities":[{"vulnerability":"VCID-bk2m-utzq-33fs"},{"vulnerability":"VCID-csgu-69ez-hfem"},{"vulnerability":"VCID-vtz5-5t2s-wbe7"}],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:pypi/metagpt@0.8.2"}],"references":[{"reference_url":"https://api.first.org/data/v1/epss?cve=CVE-2026-6109","reference_id":"","reference_type":"","scores":[{"value":"0.00012","scoring_system":"epss","scoring_elements":"0.0185","published_at":"2026-06-11T12:55:00Z"},{"value":"0.00012","scoring_system":"epss","scoring_elements":"0.01853","published_at":"2026-06-13T12:55:00Z"},{"value":"0.00012","scoring_system":"epss","scoring_elements":"0.01852","published_at":"2026-06-12T12:55:00Z"},{"value":"0.00012","scoring_system":"epss","scoring_elements":"0.01862","published_at":"2026-06-14T12:55:00Z"}],"url":"https://api.first.org/data/v1/epss?cve=CVE-2026-6109"},{"reference_url":"https://github.com/FoundationAgents/MetaGPT","reference_id":"","reference_type":"","scores":[{"value":"4.3","scoring_system":"cvssv3.1","scoring_elements":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N"},{"value":"2.1","scoring_system":"cvssv4","scoring_elements":"CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:P/VC:N/VI:L/VA:N/SC:N/SI:N/SA:N/E:P"},{"value":"LOW","scoring_system":"generic_textual","scoring_elements":""}],"url":"https://github.com/FoundationAgents/MetaGPT"},{"reference_url":"https://nvd.nist.gov/vuln/detail/CVE-2026-6109","reference_id":"","reference_type":"","scores":[{"value":"4.3","scoring_system":"cvssv3.1","scoring_elements":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N"},{"value":"2.1","scoring_system":"cvssv4","scoring_elements":"CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:P/VC:N/VI:L/VA:N/SC:N/SI:N/SA:N/E:P"},{"value":"LOW","scoring_system":"generic_textual","scoring_elements":""}],"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-6109"},{"reference_url":"https://github.com/FoundationAgents/MetaGPT/issues/1932","reference_id":"1932","reference_type":"","scores":[{"value":"5","scoring_system":"cvssv2","scoring_elements":"AV:N/AC:L/Au:N/C:N/I:P/A:N/E:POC/RL:ND/RC:UR"},{"value":"4.3","scoring_system":"cvssv3","scoring_elements":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N/E:P/RL:X/RC:R"},{"value":"4.3","scoring_system":"cvssv3.1","scoring_elements":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N"},{"value":"4.3","scoring_system":"cvssv3.1","scoring_elements":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N/E:P/RL:X/RC:R"},{"value":"2.1","scoring_system":"cvssv4","scoring_elements":"CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:P/VC:N/VI:L/VA:N/SC:N/SI:N/SA:N/E:P"},{"value":"5.3","scoring_system":"cvssv4","scoring_elements":"CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:P/VC:N/VI:L/VA:N/SC:N/SI:N/SA:N/E:P"},{"value":"LOW","scoring_system":"generic_textual","scoring_elements":""},{"value":"Track","scoring_system":"ssvc","scoring_elements":"SSVCv2/E:P/A:N/T:P/P:M/B:A/M:M/D:T/2026-04-14T15:17:18Z/"}],"url":"https://github.com/FoundationAgents/MetaGPT/issues/1932"},{"reference_url":"https://vuldb.com/vuln/356969","reference_id":"356969","reference_type":"","scores":[{"value":"5","scoring_system":"cvssv2","scoring_elements":"AV:N/AC:L/Au:N/C:N/I:P/A:N/E:POC/RL:ND/RC:UR"},{"value":"4.3","scoring_system":"cvssv3","scoring_elements":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N/E:P/RL:X/RC:R"},{"value":"4.3","scoring_system":"cvssv3.1","scoring_elements":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N/E:P/RL:X/RC:R"},{"value":"4.3","scoring_system":"cvssv3.1","scoring_elements":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N"},{"value":"2.1","scoring_system":"cvssv4","scoring_elements":"CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:P/VC:N/VI:L/VA:N/SC:N/SI:N/SA:N/E:P"},{"value":"5.3","scoring_system":"cvssv4","scoring_elements":"CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:P/VC:N/VI:L/VA:N/SC:N/SI:N/SA:N/E:P"},{"value":"LOW","scoring_system":"generic_textual","scoring_elements":""},{"value":"Track","scoring_system":"ssvc","scoring_elements":"SSVCv2/E:P/A:N/T:P/P:M/B:A/M:M/D:T/2026-04-14T15:17:18Z/"}],"url":"https://vuldb.com/vuln/356969"},{"reference_url":"https://vuldb.com/submit/791759","reference_id":"791759","reference_type":"","scores":[{"value":"5","scoring_system":"cvssv2","scoring_elements":"AV:N/AC:L/Au:N/C:N/I:P/A:N/E:POC/RL:ND/RC:UR"},{"value":"4.3","scoring_system":"cvssv3","scoring_elements":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N/E:P/RL:X/RC:R"},{"value":"4.3","scoring_system":"cvssv3.1","scoring_elements":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N"},{"value":"4.3","scoring_system":"cvssv3.1","scoring_elements":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N/E:P/RL:X/RC:R"},{"value":"2.1","scoring_system":"cvssv4","scoring_elements":"CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:P/VC:N/VI:L/VA:N/SC:N/SI:N/SA:N/E:P"},{"value":"5.3","scoring_system":"cvssv4","scoring_elements":"CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:P/VC:N/VI:L/VA:N/SC:N/SI:N/SA:N/E:P"},{"value":"LOW","scoring_system":"generic_textual","scoring_elements":""},{"value":"Track","scoring_system":"ssvc","scoring_elements":"SSVCv2/E:P/A:N/T:P/P:M/B:A/M:M/D:T/2026-04-14T15:17:18Z/"}],"url":"https://vuldb.com/submit/791759"},{"reference_url":"https://vuldb.com/vuln/356969/cti","reference_id":"cti","reference_type":"","scores":[{"value":"5","scoring_system":"cvssv2","scoring_elements":"AV:N/AC:L/Au:N/C:N/I:P/A:N/E:POC/RL:ND/RC:UR"},{"value":"4.3","scoring_system":"cvssv3","scoring_elements":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N/E:P/RL:X/RC:R"},{"value":"4.3","scoring_system":"cvssv3.1","scoring_elements":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N"},{"value":"4.3","scoring_system":"cvssv3.1","scoring_elements":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N/E:P/RL:X/RC:R"},{"value":"2.1","scoring_system":"cvssv4","scoring_elements":"CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:P/VC:N/VI:L/VA:N/SC:N/SI:N/SA:N/E:P"},{"value":"5.3","scoring_system":"cvssv4","scoring_elements":"CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:P/VC:N/VI:L/VA:N/SC:N/SI:N/SA:N/E:P"},{"value":"LOW","scoring_system":"generic_textual","scoring_elements":""},{"value":"Track","scoring_system":"ssvc","scoring_elements":"SSVCv2/E:P/A:N/T:P/P:M/B:A/M:M/D:T/2026-04-14T15:17:18Z/"}],"url":"https://vuldb.com/vuln/356969/cti"},{"reference_url":"https://github.com/advisories/GHSA-w287-wwhf-95vv","reference_id":"GHSA-w287-wwhf-95vv","reference_type":"","scores":[{"value":"LOW","scoring_system":"cvssv3.1_qr","scoring_elements":""}],"url":"https://github.com/advisories/GHSA-w287-wwhf-95vv"},{"reference_url":"https://github.com/FoundationAgents/MetaGPT/","reference_id":"MetaGPT","reference_type":"","scores":[{"value":"5","scoring_system":"cvssv2","scoring_elements":"AV:N/AC:L/Au:N/C:N/I:P/A:N/E:POC/RL:ND/RC:UR"},{"value":"4.3","scoring_system":"cvssv3","scoring_elements":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N/E:P/RL:X/RC:R"},{"value":"4.3","scoring_system":"cvssv3.1","scoring_elements":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N/E:P/RL:X/RC:R"},{"value":"5.3","scoring_system":"cvssv4","scoring_elements":"CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:P/VC:N/VI:L/VA:N/SC:N/SI:N/SA:N/E:P"},{"value":"Track","scoring_system":"ssvc","scoring_elements":"SSVCv2/E:P/A:N/T:P/P:M/B:A/M:M/D:T/2026-04-14T15:17:18Z/"}],"url":"https://github.com/FoundationAgents/MetaGPT/"}],"weaknesses":[{"cwe_id":352,"name":"Cross-Site Request Forgery (CSRF)","description":"The web application does not, or can not, sufficiently verify whether a well-formed, valid, consistent request was intentionally provided by the user who submitted the request."},{"cwe_id":862,"name":"Missing Authorization","description":"The product does not perform an authorization check when an actor attempts to access a resource or perform an action."},{"cwe_id":937,"name":"OWASP Top Ten 2013 Category A9 - Using Components with Known Vulnerabilities","description":"Weaknesses in this category are related to the A9 category in the OWASP Top Ten 2013."},{"cwe_id":1035,"name":"OWASP Top Ten 2017 Category A9 - Using Components with Known Vulnerabilities","description":"Weaknesses in this category are related to the A9 category in the OWASP Top Ten 2017."}],"exploits":[],"severity_range_score":"0.1 - 5.3","exploitability":"0.5","weighted_severity":"4.8","risk_score":2.4,"resource_url":"http://public2.vulnerablecode.io/vulnerabilities/VCID-bk2m-utzq-33fs"}