| Package | Affected versions | Patched versions |
|---|---|---|
| llama-hub | < 0.0.67 | 0.0.67 |
| llamahub | < 0.0.67 | 0.0.67 |
The OpenAPI and ChatGPT plugin loaders in LlamaHub (aka llama-hub) before 0.0.67 allow attackers to execute arbitrary code because safe_load is not used for YAML.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free