https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-08T07:24:35.478160+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/euvd-2026-255085 EUVD-2026-255085 2026-10-08T07:24:35.480965+00:00 EUVD-2026-255085 https://cve.radiocsirt.org/vuln/fkie_cve-2024-6281 fkie_cve-2024-6281 2026-10-08T07:24:35.481005+00:00

A path traversal vulnerability exists in the `apply_settings` function of parisneo/lollms versions prior to 9.5.1. The `sanitize_path` function does not adequately secure the `discussion_db_name` parameter, allowing attackers to manipulate the path and potentially write to important system folders.

 https://cve.radiocsirt.org/vuln/ghsa-8mrm-r7h3-c3hj GHSA-8mrm-r7h3-c3hj — LoLLMS vulnerable to Expected Behavior Violation 2026-10-08T07:24:35.481039+00:00

Affected: PyPI: lollms

A path traversal vulnerability exists in the `apply_settings` function of parisneo/lollms versions prior to 9.5.1. The `sanitize_path` function does not adequately secure the `discussion_db_name` parameter, allowing attackers to manipulate the path and potentially write to important system folders.

 https://cve.radiocsirt.org/vuln/pysec-2026-1587 PYSEC-2026-1587 — LoLLMS vulnerable to Expected Behavior Violation 2026-10-08T07:24:35.481064+00:00

Affected: PyPI: lollms

A path traversal vulnerability exists in the `apply_settings` function of parisneo/lollms versions prior to 9.5.1. The `sanitize_path` function does not adequately secure the `discussion_db_name` parameter, allowing attackers to manipulate the path and potentially write to important system folders.