Login Request a demo
LO
Product
Lollms
by Lollms · last CVE Jul 18, 2026
12
CVEs
0
On KEV
9.8
Max CVSS
0
New 30D
Vulnerabilities12In the news0Timeline
Severity mix
Critical 4High 3Medium 4Low 1
Severity
All severities12Critical4High3Medium4Low1
Exploitation
On CISA KEV0Exploited in the wild0
Watch

Add Lollms to your stack to get only the CVEs that touch what you run.

CVECVSSEPSSPublishedSummary · affected versions
CVE-2024-4499
6.3
0%
Jun 24
A Cross-Site Request Forgery (CSRF) vulnerability exists in the XTTS server of parisneo/lollms version 9.6 due to a lax CORS policy
Affected: 9.6
CVE-2026-1116
6.1
0%
Apr 12
Cross-site Scripting (XSS) in parisneo/lollms
Affected: through 2.1.0
CVE-2026-12228
5.4
0%
Jul 18
Stored XSS in Direct Messages via Prompt Sharing in parisneo/lollms
Affected: through 2.1.0
CVE-2024-6985
4.4
0%
Oct 11
A path traversal vulnerability exists in the api open_personality_folder endpoint of parisneo/lollms-webui
Affected: before 5.9.0
Showing 4