HIGH7.5PyPI
PYSEC-2024-108· CVE-2024-4881, GHSA-p8h7-c8gw-6x8cModified: 6/10/2026
package
PyPI/lollms
pkg:pypi/lollms
CRITICAL9.0PyPI
PYSEC-2024-116· CVE-2024-6581, GHSA-cm59-8rmv-f2cjModified: 6/10/2026
MEDIUM4.4PyPI
PYSEC-2024-122· CVE-2024-6985, GHSA-6h64-g7cj-hj56Modified: 6/10/2026
CRITICAL9.8PyPI
PYSEC-2026-1583· CVE-2024-3429, GHSA-3x47-w4rx-6pm7LoLLMS Path Traversal vulnerability
Modified: 7/7/2026
MEDIUM6.8PyPI
PYSEC-2026-1584· CVE-2024-3121, GHSA-79h8-gxhq-q3jgRemote Code Execution in create_conda_env function in lollms
Modified: 7/7/2026
LOW3.4PyPI
PYSEC-2026-1585· CVE-2024-6971, GHSA-7pgr-32fx-c6x9Lord of Large Language Models (LoLLMs) Server path traversal vulnerability in lollms_file_system.py
Modified: 7/7/2026
HIGH8.2PyPI
PYSEC-2026-1586· CVE-2026-1117, GHSA-82fw-ch24-j34wLollms has an Improper Access Control vulnerability
Modified: 7/7/2026
HIGH7.3PyPI
PYSEC-2026-1587· CVE-2024-6281, GHSA-8mrm-r7h3-c3hjLoLLMS vulnerable to Expected Behavior Violation
Modified: 7/7/2026
HIGH8.6PyPI
PYSEC-2026-1588· CVE-2024-6085, GHSA-9chm-m6x2-6fvclollms vulnerable to path traversal due to unauthenticated root folder settings change
Modified: 7/7/2026
MEDIUM4.0PyPI
PYSEC-2026-1589· CVE-2024-4330, GHSA-9p73-x86v-jw57path traversal vulnerability was identified in the parisneo/lollms-webui
Modified: 7/7/2026
HIGH7.5PyPI
PYSEC-2026-1590· CVE-2025-6386, GHSA-j5pr-vrjj-9v4hLord of Large Language Models vulnerable to Observable Discrepancy attack via authenticate_user function
Modified: 7/7/2026
HIGH8.4PyPI
PYSEC-2026-1591· CVE-2024-6982, GHSA-jccx-m9v4-9hwhLoLLMS Code Injection vulnerability
Modified: 7/7/2026
HIGH7.4PyPI
PYSEC-2026-1592· CVE-2024-5824, GHSA-m45c-v46h-c788lollms path traversal vulnerability allows overriding of config.yaml file, leading to RCE
Modified: 7/7/2026
CRITICAL9.8PyPI
PYSEC-2026-1593· CVE-2024-4078, GHSA-pwc9-q4hj-pg8gLoLLMS Command Injection vulnerability
Modified: 7/7/2026
HIGH7.3PyPI
PYSEC-2026-1594· CVE-2024-6139, GHSA-w9qf-83jg-2x6clollms vulnerable to dot-dot-slash path traversal in XTTS server
Modified: 7/7/2026
CRITICAL9.8PyPI
PYSEC-2026-170· CVE-2026-1114, GHSA-9296-v3fr-j92jModified: 7/13/2026
HIGH8.3PyPI
PYSEC-2026-204· CVE-2026-0562Modified: 6/6/2026
CRITICAL9.8PyPI
PYSEC-2026-2198· CVE-2026-0558Modified: 7/13/2026
HIGH7.5PyPI
PYSEC-2026-2199· CVE-2026-0560Modified: 7/13/2026
MEDIUM6.1PyPI
PYSEC-2026-2200· CVE-2026-1116Modified: 7/13/2026
MEDIUM4.1PyPI
PYSEC-2026-2612· CVE-2026-1163, GHSA-8jg2-726g-xh43parisneo/lollms has an insufficient session expiration vulnerability
Modified: 7/13/2026
CRITICAL9.6PyPI
PYSEC-2026-401· CVE-2026-1115, GHSA-8wrq-fv5f-pfp2parisneo/lollms vulnerable to stored XSS in the social feature
Modified: 7/1/2026
CRITICAL9.8PyPI
PYSEC-2026-402· CVE-2024-5443, GHSA-mvrm-fh8q-6wr2Remote Code Execution via path traversal bypass in lollms
Modified: 7/1/2026
CRITICAL9.1PyPI
PYSEC-2026-403· CVE-2024-4315, GHSA-vqwr-q6cc-c242parisneo/lollms Local File Inclusion (LFI) attack
Modified: 7/1/2026
CRITICAL9.8PyPI
GHSA-3x47-w4rx-6pm7· CVE-2024-3429, PYSEC-2026-1583LoLLMS Path Traversal vulnerability
Modified: 7/7/2026
MEDIUM4.4PyPI
GHSA-6h64-g7cj-hj56· CVE-2024-6985, PYSEC-2024-122Lord of Large Language Models (LoLLMs) path traversal vulnerability in the api open_personality_folder endpoint
Modified: 11/15/2024
MEDIUM6.8PyPI
GHSA-79h8-gxhq-q3jg· CVE-2024-3121, PYSEC-2026-1584Remote Code Execution in create_conda_env function in lollms
Modified: 7/7/2026
LOW3.4PyPI
GHSA-7pgr-32fx-c6x9· CVE-2024-6971, PYSEC-2026-1585Lord of Large Language Models (LoLLMs) Server path traversal vulnerability in lollms_file_system.py
Modified: 7/7/2026
HIGH8.2PyPI
GHSA-82fw-ch24-j34w· CVE-2026-1117, PYSEC-2026-1586Lollms has an Improper Access Control vulnerability
Modified: 7/7/2026
MEDIUM4.1PyPI
GHSA-8jg2-726g-xh43· CVE-2026-1163, PYSEC-2026-2612parisneo/lollms has an insufficient session expiration vulnerability
Modified: 7/13/2026
HIGH7.3PyPI
GHSA-8mrm-r7h3-c3hj· CVE-2024-6281, PYSEC-2026-1587LoLLMS vulnerable to Expected Behavior Violation
Modified: 7/7/2026
CRITICAL9.6PyPI
GHSA-8wrq-fv5f-pfp2· CVE-2026-1115, PYSEC-2026-401parisneo/lollms vulnerable to stored XSS in the social feature
Modified: 6/29/2026
CRITICAL9.8PyPI
GHSA-9296-v3fr-j92j· CVE-2026-1114, PYSEC-2026-170LoLLMs is vulnerable to Improper Access Control through weak secret key
Modified: 7/7/2026
HIGH8.6PyPI
GHSA-9chm-m6x2-6fvc· CVE-2024-6085, PYSEC-2026-1588lollms vulnerable to path traversal due to unauthenticated root folder settings change
Modified: 7/7/2026
MEDIUM4.0PyPI
GHSA-9p73-x86v-jw57· CVE-2024-4330, PYSEC-2026-1589path traversal vulnerability was identified in the parisneo/lollms-webui
Modified: 7/7/2026
MEDIUM6.5PyPI
GHSA-cm59-8rmv-f2cj· CVE-2024-6581, PYSEC-2024-116Lollms vulnerable to Cross-site Scripting
Modified: 11/4/2024
HIGH7.5PyPI
GHSA-j5pr-vrjj-9v4h· CVE-2025-6386, PYSEC-2026-1590Lord of Large Language Models vulnerable to Observable Discrepancy attack via authenticate_user function
Modified: 7/7/2026
HIGH8.4PyPI
GHSA-jccx-m9v4-9hwh· CVE-2024-6982, PYSEC-2026-1591LoLLMS Code Injection vulnerability
Modified: 7/7/2026
HIGH7.4PyPI
GHSA-m45c-v46h-c788· CVE-2024-5824, PYSEC-2026-1592lollms path traversal vulnerability allows overriding of config.yaml file, leading to RCE
Modified: 7/7/2026
CRITICAL9.8PyPI
GHSA-mvrm-fh8q-6wr2· CVE-2024-5443, PYSEC-2026-402Remote Code Execution via path traversal bypass in lollms
Modified: 6/29/2026
HIGH7.5PyPI
GHSA-p8h7-c8gw-6x8c· CVE-2024-4881, PYSEC-2024-108LoLLMS Path Traversal vulnerability
Modified: 10/17/2024
CRITICAL9.8PyPI
GHSA-pwc9-q4hj-pg8g· CVE-2024-4078, PYSEC-2026-1593LoLLMS Command Injection vulnerability
Modified: 7/7/2026
CRITICAL9.1PyPI
GHSA-vqwr-q6cc-c242· CVE-2024-4315, PYSEC-2026-403parisneo/lollms Local File Inclusion (LFI) attack
Modified: 6/29/2026
HIGH7.3PyPI
GHSA-w9qf-83jg-2x6c· CVE-2024-6139, PYSEC-2026-1594lollms vulnerable to dot-dot-slash path traversal in XTTS server
Modified: 7/7/2026