How many CVEs have a located fix in Significant-Gravitas/AutoGPT?

14 published CVEs have a fix traced to functions in Significant-Gravitas/AutoGPT, touching 95 functions across 45 files.

Which function in Significant-Gravitas/AutoGPT has been patched by the most CVEs?

extract_code in autogpt_platform/backend/backend/blocks/code_extraction_block.py has been changed by 3 CVE fixes, from 2026 to 2026.

How large is a typical CVE fix in Significant-Gravitas/AutoGPT?

The median fix changes 111 lines. 21% of fixes change 20 lines or fewer, and 14% change a single function.

How is a fix located to a function?

The upstream fix commit for each CVE is fetched and its diff is split into hunks. Each hunk is attributed to the function, method or type it changes, using the definition the diff itself names. Backports of the same fix to stable branches are counted once.

RadicalNotion.AI

Log in Create an account

python

typescript

#412 of 500 repositories

Significant-Gravitas/AutoGPT

Name: Significant-Gravitas/AutoGPT: functions patched by CVE fixes
Creator: RadicalNotion.AI
License: https://creativecommons.org/licenses/by-nc/4.0/

Functions and files changed by CVE fixes in this repository.

Latest located fix August 11, 2026

14

CVE fixes located

Published CVEs

95

Functions patched

Distinct function sites

45

Files patched

Distinct source files

2025–2026

Years covered

By CVE publication date

Overview

14 published CVEs have a fix traced to functions in Significant-Gravitas/AutoGPT, the earliest published in 2025. Those fixes changed 95 distinct functions across 45 files, in 356 patch hunks.

Among the 500 repositories tracked here, Significant-Gravitas/AutoGPT ranks #412 by the number of CVEs with a located fix.

Most patched functions

Functions in Significant-Gravitas/AutoGPT changed by the most CVE fixes.

Most patched files

Files in Significant-Gravitas/AutoGPT changed by the most CVE fixes.

1autogpt_platform/backend/backend/blocks/text.py4 CVEs · 3 functions
2autogpt_platform/backend/backend/util/request.py3 CVEs · 5 functions
3autogpt_platform/backend/backend/util/file.py3 CVEs · 3 functions
4autogpt_platform/backend/backend/blocks/code_extraction_block.py3 CVEs · 2 functions
5autogpt_platform/autogpt_libs/autogpt_libs/logging/config.py3 CVEs · 1 functions
6autogpt_platform/backend/backend/blocks/iteration.py3 CVEs · 1 functions
7autogpt_platform/backend/backend/blocks/llm.py3 CVEs · 1 functions
8autogpt_platform/backend/backend/blocks/rss.py3 CVEs · 1 functions
9autogpt_platform/backend/backend/blocks/xml_parser.py3 CVEs · 1 functions
10autogpt_platform/backend/backend/executor/activity_status_generator.py3 CVEs · 0 functions

Fix size

How much code a CVE fix in Significant-Gravitas/AutoGPT changes, with backports counted once.

111

Median lines changed

Added plus removed, per CVE

21%

Fixes of 20 lines or fewer

Share of CVE fixes

14%

Fixes in a single function

Share of CVE fixes

Latest CVEs

The most recently published CVEs with a fix located in Significant-Gravitas/AutoGPT, and the functions each fix changed.

AutoGPT: Webhook provider path confusion bypasses generic webhook secret verification
CVE-2026-72922webhook_ingress_generic
High · CVSS 8.2
EPSS 0.5%2026-08-11
AutoGPT has Authenticated Session Hijacking via IDOR
CVE-2026-30950assign_user_to_session event_generator
High · CVSS 7.1
EPSS 0.4%2026-05-18
AutoGPT has missing Docker log rotation on platform containers that allows host disk-exhaustion DoS
CVE-2025-32425run parse_feed configure_logging
Medium · CVSS 5.1
EPSS 0.2%2026-05-13
AutoGPT Affected by Remote Code Execution via Dynamic Module Import in Block Loading (__import__)
CVE-2026-26020_validate_graph_get_errors execute_node
Critical · CVSS 9.4
EPSS 1.0%2026-02-12
Redos (Regular Expression Denial of Service) at Code Extraction Block in significant-gravitas/autogpt
CVE-2026-26006run parse_feed configure_logging
Medium · CVSS 6.5
EPSS 0.7%2026-02-10
AutoGPT has a DoS vulnerability in ReadRSSFeedBlock
CVE-2025-32393run parse_feed configure_logging
High · CVSS 8.7
EPSS 0.4%2026-02-05
AutoGPT's API Keys and Secrets Logged in Plaintext in Stagehand Integration Blocks
CVE-2026-22038run
High · CVSS 8.1
EPSS 0.5%2026-02-04
AutoGPT Platform Exposes Graph Execution Results via Authorization Gap
CVE-2025-53944get_graph_execution_results get_outputs_with_names stop_graph_runs
High · CVSS 7.7
EPSS 0.5%2025-07-30
AutoGPT allows cross-user sharing of node execution results through WebSockets API
CVE-2025-31494handle_subscribe websocket_router from_graph
Low · CVSS 3.5
EPSS 0.4%2025-04-14
AutoGPT allows SSRF due to DNS Rebinding in requests wrapper
CVE-2025-31490validate_url request
High · CVSS 7.5
EPSS 0.5%2025-04-14
CVE-2024-10457
CVE-2024-10457is_ip_blocked read_folder run
Medium · CVSS 6.5
EPSS 0.6%2025-03-20
SSRF Check Bypass in Requests Utility in significant-gravitas/autogpt
CVE-2025-0454import
High · CVSS 7.5
EPSS 0.6%2025-03-20

Get an alert for each new Significant-Gravitas/AutoGPT CVE, with the patched functions and AI-written analysis.

Monitor AutoGPT CVEs

Other repositories

Repositories with a similar number of located CVE fixes.

AcademySoftwareFoundation/OpenImageIO14 CVEs ail-project/ail-framework14 CVEs android.googlesource.com/platform-external-libhevc14 CVEs apostrophecms/apostrophe14 CVEs assimp/assimp14 CVEs authzed/spicedb14 CVEs bigtreecms/BigTree-CMS14 CVEs canonical/lxd14 CVEs

Browse all repositories

Frequently asked questions

Common questions about CVE fixes in Significant-Gravitas/AutoGPT.

How many CVEs have a located fix in Significant-Gravitas/AutoGPT?: 14 published CVEs have a fix traced to functions in Significant-Gravitas/AutoGPT, touching 95 functions across 45 files.
Which function in Significant-Gravitas/AutoGPT has been patched by the most CVEs?: extract_code in autogpt_platform/backend/backend/blocks/code_extraction_block.py has been changed by 3 CVE fixes, from 2026 to 2026.
How large is a typical CVE fix in Significant-Gravitas/AutoGPT?: The median fix changes 111 lines. 21% of fixes change 20 lines or fewer, and 14% change a single function.
How is a fix located to a function?: The upstream fix commit for each CVE is fetched and its diff is split into hunks. Each hunk is attributed to the function, method or type it changes, using the definition the diff itself names. Backports of the same fix to stable branches are counted once.

References

Fix locations are computed by RadicalNotion.AI from the upstream patch diff of each CVE. CVE data is sourced from the CVE Program.

Track Significant-Gravitas/AutoGPT CVEs

Get an alert when a new CVE lands in this repository, with the patched functions and AI-written remediation guidance.

Create an account See pricing