Threats tagged 'ghsa-297x-2qf3-jrj3'

1 threat

Severity	CVSS	Threat	Source	Published	Score and star
Critical	9.8	CVE-2024-23730llama-hub · Unsafe Yaml Deserialization Critical9.82024-01-21GCVE DatabaseCVE-2024-23730 A critical vulnerability in llama-hub before version 0.0.67 allows attackers to execute arbitrary code via unsafe YAML deserialization in the OpenAPI and ChatGPT plugin loaders. This occurs because the library does not use safe_load for YAML parsing. The issue is fixed in version 0.0.67. Report on CVE-2024-23730 Vulnerability CWE-502 #ghsa-297x-2qf3-jrj3 #pypi	GCVE Database	2024-01-21

Page 1 of 1