LO
Product
lollms-webui
by ParisNeo · last CVE Mar 24, 2026
42
CVEs
0
On KEV
9.8
Max CVSS
0
New 30D
Severity mix
Critical 18High 17Medium 4Low 3
Watch

Add lollms-webui to your stack to get only the CVEs that touch what you run.

CVECVSSEPSSPublishedSummary · affected versions
CVE-2024-6040
8.8
0%
Aug 1
Missing client_id in parisneo/lollms-webui
Affected: 9.8
CVE-2024-4403
8.8
0%
Jun 10
CSRF in restart_program in parisneo/lollms-webui
Affected: 0
CVE-2024-1522
8.8
0%
Mar 30
Cross-Site Request Forgery (CSRF) Leading to Remote Code Execution in parisneo/lollms-webui
Affected: before 9,.2
CVE-2024-4897
8.4
0%
Jul 2
Remote Code Execution in parisneo/lollms-webui
Affected: 9.5
CVE-2024-3435
8.4
1%
May 16
Path Traversal in parisneo/lollms-webui
Affected: before 9.5
CVE-2024-2288
8.3
0%
Jun 6
CSRF File Upload Vulnerability in parisneo/lollms-webui
Affected: before 7.3.0
CVE-2024-1646
8.2
1%
Apr 16
Authentication Bypass in parisneo/lollms-webui
Affected: All versions, or not specified
CVE-2024-4328
8.1
0%
Jun 10
CSRF in clear_personality_files_list in parisneo/lollms-webui
Affected: 9.6
CVE-2024-4498
7.7
0%
Jun 25
Path Traversal and RFI Vulnerability in parisneo/lollms-webui
Affected: 9.7
CVE-2024-6394
7.5
1%
Sep 30
Local File Inclusion in parisneo/lollms-webui
Affected: before 9.8
CVE-2024-2178
7.5
1%
Jun 2
Path Traversal Vulnerability in parisneo/lollms-webui
Affected: 0
CVE-2024-1569
7.5
1%
Apr 16
Uncontrolled Resource Consumption in parisneo/lollms-webui
Affected: before 9.6
CVE-2024-5824
7.4
0%
Jun 27
Path Traversal in parisneo/lollms
Affected: 0
CVE-2024-5125
7.3
0%
Nov 14
XSS and Open Redirect via SVG File Upload in parisneo/lollms-webui
Affected: before 9.8
CVE-2024-6139
7.3
1%
Jun 27
Path Traversal in parisneo/lollms
Affected: 9.6 through 9.8
CVE-2024-6674
7.1
0%
Oct 29
Data Leak through CORS Misconfiguration in parisneo/lollms-webui
Affected: before 10
CVE-2024-6959
7.1
0%
Oct 13
Denial of Service (DOS) in multipart boundary while uploading file in parisneo/lollms-webui
Affected: 9.8
Showing 17