Security Advisories
CVEs affecting projects tracked on Release Alert, from NVD & OSV.
CVE-2024-23730
9.8
CRITICALCVSS v3
Published
January 21, 2024
Affected
1 project
Assigned by
MITRE
Severity scale
010
Description
The OpenAPI and ChatGPT plugin loaders in LlamaHub (aka llama-hub) before 0.0.67 allow attackers to execute arbitrary code because safe_load is not used for YAML.
run-llama/llama-hub
GitHubA library of data loaders for LLMs made by the community -- to be used with LlamaIndex and/or LangChain
GitHubA library of data loaders for LLMs made by the community -- to be used with LlamaIndex and/or LangChain< 0.0.67NVD