Llamahub

Records1All Threatist records

Exploited (KEV)0None in CISA KEV

CVSS critical1CVSS 9.0–10.0

CVSS high0CVSS 7.0–8.9

Exploited now

Llamahub records in CISA KEV

No Llamahub vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records

Llamahub 1 record MEDIUM

Records

1 record

TI-2024-15734 CVE-2024-23730 · GHSA-297x-2qf3-jrj3

The OpenAPI and ChatGPT plugin loaders in LlamaHub (aka llama-hub) before 0.0.67 allow…

MEDIUM 51

The OpenAPI and ChatGPT plugin loaders in LlamaHub (aka llama-hub) before 0.0.67 allow attackers to execute arbitrary code because safe_load is not used for YAML.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.01202 Published 2024-01-21 Fixed in 0.0.67 CWE-502

Open these records in search →

Critical	1
High	0
Medium	0
Low	0
No CVSS	0