CVE-2024-6139
2 advisories.
PyPI/lollms CVE-2024-6139: high 7.3, EPSS 0.52%
lollms vulnerable to dot-dot-slash path traversal in XTTS server
Action: No fix published. Pin and monitor.
Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | - | 9.5.1 |
Fixed versions
No fixed version in the source.
Sources
- osv: GHSA-w9qf-83jg-2x6c
- https://nvd.nist.gov/vuln/detail/CVE-2024-6139
- https://github.com/ParisNeo/lollms
- https://huntr.com/bounties/fd00f112-efd0-40a1-8227-d6733716e4c0
CVE-2024-6139 · published · modified · JSON
PyPI/lollms CVE-2024-6139: high 7.3, EPSS 0.52%
lollms vulnerable to dot-dot-slash path traversal in XTTS server
Action: No fix published. Pin and monitor.
Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | - | 9.5.1 |
Fixed versions
No fixed version in the source.
Sources
- osv: PYSEC-2026-1594
- https://nvd.nist.gov/vuln/detail/CVE-2024-6139
- https://github.com/ParisNeo/lollms
- https://huntr.com/bounties/fd00f112-efd0-40a1-8227-d6733716e4c0
- https://pypi.org/project/lollms
- https://github.com/advisories/GHSA-w9qf-83jg-2x6c
CVE-2024-6139 · published · modified · JSON