PyPI / lollms

LoLLMS Path Traversal vulnerability

Modified: 9/25/2024

Lord of Large Language Models (LoLLMs) path traversal vulnerability in the api open_personality_folder endpoint

Modified: 11/15/2024

Remote Code Execution in create_conda_env function in lollms

Modified: 9/13/2024

Lord of Large Language Models (LoLLMs) Server path traversal vulnerability in lollms_file_system.py

Modified: 10/14/2024

Lollms has an Improper Access Control vulnerability

Modified: 2/3/2026

parisneo/lollms has an insufficient session expiration vulnerability

Modified: 4/8/2026

LoLLMS vulnerable to Expected Behavior Violation

Modified: 10/15/2025

parisneo/lollms vulnerable to stored XSS in the social feature

Modified: 4/10/2026

lollms vulnerable to path traversal due to unauthenticated root folder settings change

Modified: 6/28/2024

path traversal vulnerability was identified in the parisneo/lollms-webui

Modified: 7/9/2025

Lollms vulnerable to Cross-site Scripting

Modified: 11/4/2024

Lord of Large Language Models vulnerable to Observable Discrepancy attack via authenticate_user function

Modified: 7/8/2025

LoLLMS Code Injection vulnerability

Modified: 3/21/2025

lollms path traversal vulnerability allows overriding of config.yaml file, leading to RCE

Modified: 6/28/2024

Remote Code Execution via path traversal bypass in lollms

Modified: 6/25/2024

LoLLMS Path Traversal vulnerability

Modified: 10/17/2024

LoLLMS Command Injection vulnerability

Modified: 9/13/2024

parisneo/lollms Local File Inclusion (LFI) attack

Modified: 6/12/2024

lollms vulnerable to dot-dot-slash path traversal in XTTS server

Modified: 6/28/2024

Modified: 10/17/2024

Modified: 10/9/2025

Modified: 11/15/2024

Modified: 5/31/2026

Modified: 6/6/2026