LowCVSS 3.2
EPSS 0.24%
Llama Stack (aka llama-stack) before 0.4.0rc3 does not censor the pgvector password in the initialization log.
Product
pypi llama-stack vulnerabilities
2 published CVES affecting pypi llama-stack, from public sources (CVE.org, NVD, CISA KEV, FIRST EPSS, OSV).
- Total
- 2
- Critical
- 0
- High
- 0
- Medium
- 1
- Low
- 1
- Unscored
- 0
- CISA KEV
- 0
Latest pypi llama-stack CVEs
Newest publication first
-
-
MediumCVSS 5.3 EPSS 0.50%
Llama Stack prior to version v0.2.20 accepted unverified parameters in the resolve_ast_by_type function which could potentially allow for remote code execution.
Sources: CVE.org, NVD, CISA KEV, FIRST EPSS, OSV and public exploit-reference metadata. Product matching comes from the published CVE records. A proof-of-concept means public code exists; it is not evidence of exploitation.