Skip to content
OpenAdvisories

Package · PyPI

llama-hub

1 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

1 result · Feed

  • Critical 9.8
    CVE-2024-23730

    Unsafe yaml deserialization in llama-hub

    The OpenAPI and ChatGPT plugin loaders in LlamaHub (aka llama-hub) before 0.0.67 allow attackers to execute arbitrary code because safe_load is not used for YAML.

    llama-hub PyPI