Vendor
lavague-ai
1 known vulnerabilities.
Products
1 result · Clear filters · Feed
-
High 8.1
LaVague 0.2.35 Remote Code Execution via eval extraction
LaVague 0.2.35 contains a remote code execution vulnerability in PythonFromMarkdownExtractor.extract_as_object that evaluates untrusted language model output derived from web page content. Attackers can inject malicious Python code through web pages using ind…