PyPI/lollms CVE-2024-6982: high 8.4, EPSS 0.46%

LoLLMS Code Injection vulnerability

Action: Upgrade lollms to 11.0.0 or later.

pip install lollms==11.0.0

Affected

Fixed versions

Sources

• osv: PYSEC-2026-1591
• https://nvd.nist.gov/vuln/detail/CVE-2024-6982
• https://github.com/parisneo/lollms/commit/30e7eaba2ccfb751a81e7cb29fdef2ae8ffa6832
• https://github.com/ParisNeo/lollms
• https://huntr.com/bounties/4f8e73ac-aaaf-4d5c-a6dd-58215b5a7fea
• https://pypi.org/project/lollms
• https://github.com/advisories/GHSA-jccx-m9v4-9hwh

CVE-2024-6982 · published 2026-07-07T14:34:54.427547Z · modified 2026-07-07T17:46:56.172457798Z · JSON