PyPI/lollms CVE-2024-6985: medium 4.4, EPSS 0.36%
Lord of Large Language Models (LoLLMs) path traversal vulnerability in the api open_personality_folder endpoint
Action: No fix published. Pin and monitor.
Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | - | 9.5.1 |
Fixed versions
No fixed version in the source.
Sources
- osv: GHSA-6h64-g7cj-hj56
- https://nvd.nist.gov/vuln/detail/CVE-2024-6985
- https://github.com/parisneo/lollms/commit/28ee567a9a120967215ff19b96ab7515ce469620
- https://github.com/ParisNeo/lollms
- https://huntr.com/bounties/79c11579-47d8-4e68-8466-b47c3bf5ef6a
CVE-2024-6985 · published · modified · JSON