Lucene search
MitreCVELIST:CVE-2024-23730HistoryJan 21, 2024 - 12:00 a.m.
CVE-2024-23730
2024-01-2100:00:00
mitre
www.cve.org
1
llamahub
plugin loaders
arbitrary code
yaml
security vulnerability
The OpenAPI and ChatGPT plugin loaders in LlamaHub (aka llama-hub) before 0.0.67 allow attackers to execute arbitrary code because safe_load is not used for YAML.
Related
veracode
veracode
Arbitrary Code Execution
2024-01-23 10:42:25
github
github
Unsafe yaml deserialization in llama-hub
2024-01-21 18:30:34
cve
cve
CVE-2024-23730
2024-01-21 17:15:44
prion
prion
Design/Logic Flaw
2024-01-21 17:15:00
osv
osv
Unsafe yaml deserialization in llama-hub
2024-01-21 18:30:34
nvd
nvd
CVE-2024-23730
2024-01-21 17:15:44