Skip to content
OpenAdvisories

Vendor

lavague-ai

1 known vulnerabilities.

Products

1 result · Clear filters · Feed

  • High 8.1

    LaVague 0.2.35 Remote Code Execution via eval extraction

    LaVague 0.2.35 contains a remote code execution vulnerability in PythonFromMarkdownExtractor.extract_as_object that evaluates untrusted language model output derived from web page content. Attackers can inject malicious Python code through web pages using ind…