https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-22T20:47:26.577744+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/cve-2024-23730 CVE-2024-23730 2026-10-22T20:47:26.579484+00:00

The OpenAPI and ChatGPT plugin loaders in LlamaHub (aka llama-hub) before 0.0.67 allow attackers to execute arbitrary code because safe_load is not used for YAML.

 https://cve.radiocsirt.org/vuln/pysec-2026-393 PYSEC-2026-393 — Unsafe yaml deserialization in llama-hub 2026-10-22T20:47:26.579528+00:00

Affected: PyPI: llama-hub

The OpenAPI and ChatGPT plugin loaders in LlamaHub (aka llama-hub) before 0.0.67 allow attackers to execute arbitrary code because safe_load is not used for YAML.