lollms vulnerabilities (PyPI)
24 vulnerabilities.
-
lollmsPyPI Cross-site Scripting (XSS) in parisneo/lollms 8.2 High -
lollmsPyPI Stored XSS in parisneo/lollms 9.6 Critical -
lollmsPyPI Insufficient Session Expiration in parisneo/lollms 4.1 Medium -
lollmsPyPI Improper Access Control via Weak JWT Token in parisneo/lollms 9.8 Critical -
lollmsPyPI Unauthenticated File Upload in parisneo/lollms 7.5 High -
lollmsPyPI Server-Side Request Forgery (SSRF) in parisneo/lollms 7.5 High -
lollmsPyPI Insecure Direct Object Reference (IDOR) in parisneo/lollms 8.3 High -
lollmsPyPI Improper Access Control in parisneo/lollms 8.2 High -
lollmsPyPI Timing Attack Vulnerability in parisneo/lollms 7.5 High -
lollmsPyPI Remote Code Execution in Calculate Function in parisneo/lollms 8.4 High -
lollmsPyPI Remote Code Execution due to Stored XSS in parisneo/lollms 6.5 Medium -
lollmsPyPI Path Traversal in api open_personality_folder in parisneo/lollms-webui 4.4 Medium -
lollmsPyPI Path Traversal in parisneo/lollms-webui 3.4 Low -
lollmsPyPI Path Traversal in parisneo/lollms 7.3 High -
lollmsPyPI Path Traversal in parisneo/lollms 7.3 High -
lollmsPyPI Path Traversal in parisneo/lollms 7.4 High -
lollmsPyPI Path Traversal in parisneo/lollms 8.6 High -
lollmsPyPI Remote Code Execution in create_conda_env function in parisneo/lollms 6.8 Medium -
lollmsPyPI Remote Code Execution via Path Traversal in parisneo/lollms 9.8 Critical -
lollmsPyPI LFI Vulnerability due to Lack of Path Sanitization in parisneo/lollms 9.1 Critical -
lollmsPyPI Path Traversal in parisneo/lollms 9.8 Critical -
lollmsPyPI Path Traversal in parisneo/lollms 7.5 High -
lollmsPyPI Path Traversal in parisneo/lollms-webui 4.0 Medium -
lollmsPyPI Arbitrary Code Execution in parisneo/lollms 9.8 Critical