EDMPL/Vulnerability-Research

EDMPL/Vulnerability-Research

GitHubGitHub
GitHubgithub.com
Releases0
CVE PoCs
Log in to subscribe

CVE History

CVEPublishedCVSS v3CVSS v2
CVE-2025-45146↗
9.8 CRITICAL—

ModelCache for LLM through v0.2.0 was discovered to contain an deserialization vulnerability via the component /manager/data_manager.py. This vulnerability allows attackers to execute arbitrary code via supplying crafted data.

CVE-2024-57783↗
8.1 HIGH—

The desktop application in Dot through 0.9.3 allows XSS and resultant command execution because user input and LLM output are appended to the DOM with innerHTML (in render.js), and because the Electron window can access Node.js APIs.