CVE-2026-13483

See a problem?
Please try reporting it to the source first.
Source
https://cve.org/CVERecord?id=CVE-2026-13483
Import Source
https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2026-13483.json
JSON Data
https://api.osv.dev/v1/vulns/CVE-2026-13483
Published
2026-06-28T05:45:08Z
Modified
2026-08-12T03:51:46Z
Severity
  • 1.3 (Low) CVSS_V4 - CVSS:4.0/AV:N/AC:H/AT:N/PR:L/UI:N/VC:N/VI:L/VA:N/SC:N/SI:N/SA:N/E:P CVSS Calculator
Summary
arc53 DocsGPT Credential Storage encryption.py encrypt_credentials data authenticity
Details

A flaw has been found in arc53 DocsGPT up to 0.18.0. The affected element is the function encrypt_credentials of the file application/security/encryption.py of the component Credential Storage. This manipulation causes insufficient verification of data authenticity. It is possible to initiate the attack remotely. The complexity of an attack is rather high. The exploitability is described as difficult. The exploit has been published and may be used. The pull request to fix this issue awaits acceptance.

Database specific 
{
    "cna_assigner": "VulDB",
    "cwe_ids": [
        "CWE-345"
    ],
    "osv_generated_from": "https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/13xxx/CVE-2026-13483.json"
}
References

Affected packages

Git / github.com/arc53/docsgpt

Affected ranges

Type
GIT
Repo
https://github.com/arc53/docsgpt
Events
Introduced
f233766671a13a450fe24039674f40fbbe242142
Last Affected
71387917ecb6b295a6f93ede4ada318c83b99dd0
Database specific
Show details 
{
    "extracted_events": [
        {
            "introduced": "0.1"
        },
        {
            "last_affected": "0.1"
        },
        {
            "introduced": "0.2"
        },
        {
            "last_affected": "0.2"
        },
        {
            "introduced": "0.3"
        },
        {
            "last_affected": "0.3"
        },
        {
            "introduced": "0.4"
        },
        {
            "last_affected": "0.4"
        },
        {
            "introduced": "0.5"
        },
        {
            "last_affected": "0.5"
        },
        {
            "introduced": "0.6"
        },
        {
            "last_affected": "0.6"
        },
        {
            "introduced": "0.7"
        },
        {
            "last_affected": "0.7"
        },
        {
            "introduced": "0.8"
        },
        {
            "last_affected": "0.8"
        },
        {
            "introduced": "0.9"
        },
        {
            "last_affected": "0.9"
        },
        {
            "introduced": "0.10"
        },
        {
            "last_affected": "0.10"
        },
        {
            "introduced": "0.11"
        },
        {
            "last_affected": "0.11"
        },
        {
            "introduced": "0.12"
        },
        {
            "last_affected": "0.12"
        },
        {
            "introduced": "0.13"
        },
        {
            "last_affected": "0.13"
        },
        {
            "introduced": "0.14"
        },
        {
            "last_affected": "0.14"
        },
        {
            "introduced": "0.15"
        },
        {
            "last_affected": "0.15"
        },
        {
            "introduced": "0.16"
        },
        {
            "last_affected": "0.16"
        },
        {
            "introduced": "0.17"
        },
        {
            "last_affected": "0.17"
        },
        {
            "introduced": "0.18.0"
        },
        {
            "last_affected": "0.18.0"
        }
    ],
    "source": "AFFECTED_FIELD"
}

Affected versions

0.*
0.1
0.10
0.11
0.12
0.13
0.14
0.15
0.16
0.17
0.18.0
0.2
0.3
0.4
0.5
0.6
0.7
0.8
0.9

Database specific

source 
"https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2026-13483.json"