Advisories · Technology
parisneo/lollms.
Every CVE that names parisneo/lollms among its affected products, newest first. Vendors and products are as the CNA wrote them; check the affected versions on each record.
- CVSS 7.5 High
Path Traversal Vulnerability in parisneo/lollms
- parisneo/lollms
- Path traversal
- CVSS 8.7 High
Stored XSS in Direct Messages via Prompt Sharing in parisneo/lollms
- parisneo/lollms
- Cross-site scripting (XSS)
- CVSS 4.4 Medium
Relative Path Traversal in parisneo/lollms-webui
- parisneo/lollms
- Path traversal
- CVSS 7.1 High
Path Traversal in parisneo/lollms
- parisneo/lollms
- Path traversal
- CVSS 8.0 High
Missing check_access in lollms_binding_infos in parisneo/lollms
- parisneo/lollms
- Authentication bypass
- CVSS 4.4 Medium
Missing client_id in parisneo/lollms-webui
- parisneo/lollms
- Cross-site request forgery (CSRF)
- CVSS 7.6 High
CSRF Vulnerability in parisneo/lollms XTTS Server
- parisneo/lollms
- Cross-site request forgery (CSRF)