CVE-2026-31236
2 advisories.
PyPI/llm CVE-2026-31236: critical 9.8, EPSS 0.46%
llm CLI tool contains a code injection vulnerability via `--functions` command-line argument
Action: No fix published. Pin and monitor.
Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | - | 0.27.1 |
Fixed versions
No fixed version in the source.
Sources
- osv: GHSA-g76p-4vg5-f4qh
- https://nvd.nist.gov/vuln/detail/CVE-2026-31236
- https://github.com/simonw/llm
- https://www.notion.so/CVE-2026-31236-35d1e139318881a4a0f1fffcf671f7e3
CVE-2026-31236 · published · modified · JSON
PyPI/llm CVE-2026-31236: critical 9.8, EPSS 0.46%
llm CLI tool contains a code injection vulnerability via `--functions` command-line argument
Action: No fix published. Pin and monitor.
Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | - | 0.27.1 |
Fixed versions
No fixed version in the source.
Sources
- osv: PYSEC-2026-400
- https://nvd.nist.gov/vuln/detail/CVE-2026-31236
- https://github.com/simonw/llm
- https://www.notion.so/CVE-2026-31236-35d1e139318881a4a0f1fffcf671f7e3
- https://pypi.org/project/llm
- https://github.com/advisories/GHSA-g76p-4vg5-f4qh
CVE-2026-31236 · published · modified · JSON