Threats affecting pkg:npm/llama-hub

1 threat

Severity	CVSS	Signals	Threat	Source	Published	Score and star
Critical	9.8	EPSS 1.2%	CVE-2024-23730 · The OpenAPI and ChatGPT plugin loaders in LlamaHub (aka llama-hub) before 0.0.67 allow attackers to Critical9.8EPSS 1.2%2024-01-21CVE Database V5 The OpenAPI and ChatGPT plugin loaders in LlamaHub (aka llama-hub) before 0.0.67 allow attackers to execute arbitrary code because safe_load is not used for YAML. EPSS 1.2%Vulnerability	CVE Database V5	2024-01-21

Page 1 of 1