Outlookgp

**Name of the Vulnerable Software and Affected Versions** sigoden aichat versions prior to 0.30.5 **Description** A flaw in the API Endpoint component, specifically within the `src/serve.rs` file, allows for uncontrolled memory allocation. This issue can be triggered remotely, potentially leading to system instability or crashes due to excessive memory consumption. **Recommendations** At the moment, there is no information about a newer version that contains a fix for this vulnerability.

**Name of the Vulnerable Software and Affected Versions** zhayujie CowAgent versions prior to 2.1.8 **Description** A remote denial of service can be triggered through a manipulation of an unknown function within the `agent/tools/bash/bash.py` file of the Bash Tool component. **Recommendations** Update zhayujie CowAgent to version 2.1.8 or later. As a temporary mitigation, restrict access to the Bash Tool component or the `agent/tools/bash/bash.py` file.

**Name of the Vulnerable Software and Affected Versions** ntegrals openbrowser versions up to 067fc45d649baa961750da8e2f4a75d87c5c75c8 **Description** A remote manipulation of the Browser Agent Message Construction component within the file `packages/core/src/agent/agent.ts` leads to excessive resource consumption. **Recommendations** At the moment, there is no information about a newer version that contains a fix for this vulnerability.

**Name of the Vulnerable Software and Affected Versions** RightNow-AI OpenFang versions prior to 0.7.0 **Description** A remote issue exists in the `shell exec()` function within the `crates/openfang-runtime/src/tool runner.rs` file. This flaw allows for uncontrolled memory allocation, which can be triggered by a remote attacker. **Recommendations** At the moment, there is no information about a newer version that contains a fix for this vulnerability. As a temporary mitigation, restrict access to the `shell exec()` function to minimize the risk of exploitation.

**Name of the Vulnerable Software and Affected Versions** simular-ai Agent-S versions 0.3.1 through 0.3.2 **Description** A remote denial of service issue exists within the CodeAgent component, specifically affecting a function in the `code agent.py` file. This flaw allows a remote attacker to cause the application to become unavailable. **Recommendations** At the moment, there is no information about a newer version that contains a fix for this vulnerability. Restrict access to the `code agent.py` file or the CodeAgent component to minimize the risk of exploitation.

**Name of the Vulnerable Software and Affected Versions** simular-ai Agent-S versions prior to 0.3.3 **Description** A flaw in the Model-generated GUI Action Execution Workflow component, specifically within the `grounding.py` file, allows for remote exploitation. This issue can be triggered through the manipulation of unknown functionality, resulting in a denial of service (DoS), which is a condition where a system becomes unavailable to its intended users. **Recommendations** At the moment, there is no information about a newer version that contains a fix for this vulnerability. As a temporary mitigation, restrict access to the `grounding.py` file within the Model-generated GUI Action Execution Workflow component.

**Name of the Vulnerable Software and Affected Versions** bytebot-ai bytebot version 0.0.1 **Description** A remote attack can be performed against the Agent Execution Workflow component. By manipulating an unknown function within this component, an attacker can trigger an infinite loop, which is a sequence of instructions that continues endlessly, potentially causing the system to hang or crash. **Recommendations** At the moment, there is no information about a newer version that contains a fix for this vulnerability.