CVE-2024-34359
2 advisories.
PyPI/llama-cpp-python CVE-2024-34359: critical 9.6
llama-cpp-python vulnerable to Remote Code Execution by Server-Side Template Injection in Model Metadata
Action: Upgrade llama-cpp-python to 0.2.72 or later.
pip install llama-cpp-python==0.2.72Affected
| introduced | fixed | last affected |
|---|---|---|
| 0.2.30 | 0.2.72 | - |
Fixed versions
| 0.2.72 |
Sources
- osv: GHSA-56xg-wfcc-g829
- https://github.com/abetlen/llama-cpp-python/security/advisories/GHSA-56xg-wfcc-g829
- https://nvd.nist.gov/vuln/detail/CVE-2024-34359
- https://github.com/abetlen/llama-cpp-python/commit/b454f40a9a1787b2b5659cd2cb00819d983185df
- https://github.com/abetlen/llama-cpp-python
CVE-2024-34359 · published · modified · JSON
PyPI/llama-cpp-python CVE-2024-34359: critical 9.6
llama-cpp-python vulnerable to Remote Code Execution by Server-Side Template Injection in Model Metadata
Action: Upgrade llama-cpp-python to 0.2.72 or later.
pip install llama-cpp-python==0.2.72Affected
| introduced | fixed | last affected |
|---|---|---|
| 0.2.30 | 0.2.72 | - |
Fixed versions
| 0.2.72 |
Sources
- osv: PYSEC-2026-392
- https://github.com/abetlen/llama-cpp-python/security/advisories/GHSA-56xg-wfcc-g829
- https://nvd.nist.gov/vuln/detail/CVE-2024-34359
- https://github.com/abetlen/llama-cpp-python/commit/b454f40a9a1787b2b5659cd2cb00819d983185df
- https://github.com/abetlen/llama-cpp-python
- https://pypi.org/project/llama-cpp-python
- https://github.com/advisories/GHSA-56xg-wfcc-g829
CVE-2024-34359 · published · modified · JSON