Login Request a demo
LW
Product
Lollms Web UI
by Lollms · last CVE Mar 24, 2026
46
CVEs
0
On KEV
9.8
Max CVSS
0
New 30D
Vulnerabilities46In the news0Timeline
Severity mix
Critical 18High 18Medium 9Low 1
Severity
All severities46Critical18High18Medium9Low1
Exploitation
On CISA KEV0Exploited in the wild0
Watch

Add Lollms Web UI to your stack to get only the CVEs that touch what you run.

CVECVSSEPSSPublishedSummary · affected versions
CVE-2024-10019
6.7
1%
Mar 20
Path Traversal and OS Command Injection in parisneo/lollms-webui
Affected: 12
CVE-2024-8736
6.5
0%
Mar 20
Denial of Service (DoS) via Multipart Boundary in parisneo/lollms-webui
Affected: 12
CVE-2024-6673
6.5
0%
Oct 29
A Cross-Site Request Forgery (CSRF) vulnerability exists in the `install_comfyui` endpoint of the `lollms_comfyui.py` file in the parisneo/lollms-webui repository, versions v9.9…
Affected: before 10
CVE-2024-2299
6.1
0%
May 14
A stored Cross-Site Scripting (XSS) vulnerability exists in the parisneo/lollms-webui application due to improper validation of uploaded files in the profile picture upload…
Affected: before 9.5
CVE-2024-1602
6.1
1%
Apr 10
parisneo/lollms-webui is vulnerable to stored Cross-Site Scripting (XSS) that leads to Remote Code Execution (RCE)
Affected: 9.0
CVE-2024-6986
5.4
0%
Mar 20
Cross-site Scripting (XSS) in parisneo/lollms-webui
Affected: 9.8
CVE-2024-5933
5.4
0%
Jun 27
A Cross-site Scripting (XSS) vulnerability exists in the chat functionality of parisneo/lollms-webui in the latest version
Affected: All versions, or not specified
CVE-2024-10047
5.3
1%
Mar 20
Directory Listing Vulnerability in parisneo/lollms-webui
Affected: 9.9
CVE-2024-7058
4.4
0%
Mar 20
Relative Path Traversal in parisneo/lollms-webui
Affected: 10
Showing 9