LO
Product
Lollms-webui
9
CVEs
0
On KEV
9.8
Max CVSS
0
New 30D
Severity mix
Critical 2High 4Medium 1Low 2
Watch
Add Lollms-webui to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2024-4403 | 8.8 | Jun 10 | A Cross-Site Request Forgery (CSRF) vulnerability exists in the restart_program function of the parisneo/lollms-webui v9.6 Affected: 9.6 |
| CVE-2024-1646 | 8.2 | Apr 16 | parisneo/lollms-webui is vulnerable to authentication bypass due to insufficient protection over sensitive endpoints Affected: before 9.3 |
| CVE-2024-1569 | 7.5 | Apr 16 | parisneo/lollms-webui is vulnerable to a denial of service (DoS) attack due to uncontrolled resource consumption Affected: 9.1 |
| CVE-2024-5125 | 7.3 | Nov 14 | XSS and Open Redirect via SVG File Upload in parisneo/lollms-webui Affected: 9.6 |
Showing 4
