ag-llama-api (>=0.0.1, <=0.0.31), ag-llama-api-s (>=0.0.4, <=0.0.12) +23 more potentially affected by CVE-2026-69112 via accelerate (0.20.3)

accelerate PYPI version 0.20.3 is affected by a known vulnerability. The following packages have a transitive dependency on accelerate and may be impacted: - ag-llama-api =0.0.1, =0.0.4, =0.0.4, =0.0.11, =0.0.13, =0.0.15, =1.15.3, =1.16.3, =0.0.1, =2.0.0, =2.0.1.post2 - portfolio-agent 0.3.0rc1 a...

ag-llama-api (>=0.0.1, <=0.0.31), ag-llama-api-s (>=0.0.4, <=0.0.12) +23 more potentially affected by CVE-2026-69112 via accelerate (0.20.3)

accelerate PYPI version 0.20.3 is affected by a known vulnerability. The following packages have a transitive dependency on accelerate and may be impacted: - ag-llama-api =0.0.1, =0.0.4, =0.0.4, =0.0.11, =0.0.13, =0.0.15, =1.15.3, =1.16.3, =0.0.1, =2.0.0, =2.0.1.post2 - portfolio-agent 0.3.0rc1 a...

adapters (>=0.0.0.dev20231111, <=0.0.0.dev20231116), ag-llama-api-s (0.0.12) +44 more potentially affected by CVE-2026-9856 via transformers (4.33.3)

transformers PYPI version 4.33.3 is affected by a known vulnerability. The following packages have a transitive dependency on transformers and may be impacted: - adapters =0.0.0.dev20231111, =0.0.13, =0.0.15, =0.0.29, =0.1.0, =0.3.0, =0.0.1, =0.1.36a0, =1.1.1, =0.1.1, =0.1.5 and more Source cves:...

docsrag (>=0.1.3, <=0.1.6) potentially affected by CVE-2024-23730 via llama-hub (0.0.25)

llama-hub PYPI version 0.0.25 is affected by a known vulnerability. The following packages have a transitive dependency on llama-hub and may be impacted: - docsrag =0.1.3, =0.1.6 Source cves: CVE-2024-23730 Source advisory: OSV:PYSEC-2026-393...

PYSEC-2026-393 Unsafe yaml deserialization in llama-hub

The OpenAPI and ChatGPT plugin loaders in LlamaHub aka llama-hub before 0.0.67 allow attackers to execute arbitrary code because safeload is not used for YAML...

Unsafe yaml deserialization in llama-hub

The OpenAPI and ChatGPT plugin loaders in LlamaHub aka llama-hub before 0.0.67 allow attackers to execute arbitrary code because safeload is not used for YAML...

ag-llama-api (>=0.0.8, <=0.0.31), ag-llama-api-s (>=0.0.4, <=0.0.11) +27 more potentially affected by CVE-2026-5241 via transformers (4.29.2)

transformers PYPI version 4.29.2 is affected by a known vulnerability. The following packages have a transitive dependency on transformers and may be impacted: - ag-llama-api =0.0.8, =0.0.4, =0.0.4, =0.0.11, =0.0.3, =0.1.10, =0.2.0, =0.1.0, =0.0.1, =0.5.1.dev20240517, =0.5.2 and more Source cves:...

adapters (>=0.0.0.dev20231111, <=0.0.0.dev20231116), ag-llama-api-s (0.0.12) +44 more potentially affected by CVE-2026-5241 via transformers (4.33.3)

transformers PYPI version 4.33.3 is affected by a known vulnerability. The following packages have a transitive dependency on transformers and may be impacted: - adapters =0.0.0.dev20231111, =0.0.13, =0.0.15, =0.0.29, =0.1.0, =0.3.0, =0.0.1, =0.1.36a0, =1.1.1, =0.1.1, =0.1.5 and more Source cves:...

ag-llama-api (>=0.0.8, <=0.0.31), ag-llama-api-s (>=0.0.4, <=0.0.11) +27 more potentially affected by CVE-2026-4372 via transformers (4.29.2)

transformers PYPI version 4.29.2 is affected by a known vulnerability. The following packages have a transitive dependency on transformers and may be impacted: - ag-llama-api =0.0.8, =0.0.4, =0.0.4, =0.0.11, =0.0.3, =0.1.10, =0.2.0, =0.1.0, =0.0.1, =0.5.1.dev20240517, =0.5.2 and more Source cves:...

ag-llama-api (>=0.0.8, <=0.0.31), ag-llama-api-s (>=0.0.4, <=0.0.11) +27 more potentially affected by CVE-2025-14929 via transformers (4.29.2)

transformers PYPI version 4.29.2 is affected by a known vulnerability. The following packages have a transitive dependency on transformers and may be impacted: - ag-llama-api =0.0.8, =0.0.4, =0.0.4, =0.0.11, =0.0.3, =0.1.10, =0.2.0, =0.1.0, =0.0.1, =0.5.1.dev20240517, =0.5.2 and more Source cves:...

ag-llama-api (>=0.0.8, <=0.0.31), ag-llama-api-s (>=0.0.4, <=0.0.11) +119 more potentially affected by CVE-2025-4565 via protobuf (3.20.2)

protobuf PYPI version 3.20.2 is affected by a known vulnerability. The following packages have a transitive dependency on protobuf and may be impacted: - ag-llama-api =0.0.8, =0.0.4, =0.0.4, =0.0.11, =1.31.1, =0.1.0, =0.3.3, =0.0.13, =0.0.2, =0.0.8 and more Source cves: CVE-2025-4565 Source...

Arbitrary Code Execution

llama-hub is vulnerable to Arbitrary Code Execution. The vulnerability is due to missing safeload configuration during YAML parsing. An attackers can execute arbitrary code by exploiting this vulnerability...

docsrag (>=0.1.3, <=0.1.6) potentially affected by CVE-2024-23730 via llama-hub (0.0.25)

llama-hub PYPI version 0.0.25 is affected by a known vulnerability. The following packages have a transitive dependency on llama-hub and may be impacted: - docsrag =0.1.3, =0.1.6 Source cves: CVE-2024-23730 Source advisory: GHSA-297X-2QF3-JRJ3...

docsrag (>=0.1.3, <=0.1.6) potentially affected by CVE-2024-23730 via llama-hub (0.0.25)

llama-hub PYPI version 0.0.25 is affected by a known vulnerability. The following packages have a transitive dependency on llama-hub and may be impacted: - docsrag =0.1.3, =0.1.6 Source cves: CVE-2024-23730 Source advisory: OSV:GHSA-297X-2QF3-JRJ3...

Unsafe yaml deserialization in llama-hub

The OpenAPI and ChatGPT plugin loaders in LlamaHub aka llama-hub before 0.0.67 allow attackers to execute arbitrary code because safeload is not used for YAML...

docsrag (>=0.1.3, <=0.1.6) potentially affected by CVE-2024-23730 via llama-hub (0.0.25)

llama-hub PYPI version 0.0.25 is affected by a known vulnerability. The following packages have a transitive dependency on llama-hub and may be impacted: - docsrag =0.1.3, =0.1.6 Source cves: CVE-2024-23730 Source advisory: MEND:CVE-2024-23730...