CVE-2026-1116
1 advisory.
PyPI/lollms CVE-2026-1116: medium 6.1
A Cross-site Scripting (XSS) vulnerability was identified in the `from_dict` method of the `AppLollmsMessage` class in parisneo/lollms prior to version 2.2.0. The vulnerability arises from the lack of
Action: Upgrade lollms to 2.1.1 or later.
pip install lollms==2.1.1Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | 2.1.1 | - |
Fixed versions
| 2.1.1 |
Sources
- osv: PYSEC-2026-2200
- https://github.com/parisneo/lollms/commit/9767b882dbc893c388a286856beeaead69b8292a
- https://huntr.com/bounties/d3d076a7-2a51-4e07-8d0e-91e28e76788e
CVE-2026-1116 · published · modified · JSON