All vulnerabilities
CVE-2024-23730GHSA-297x-2qf3-jrj3PYSEC-2026-393

Unsafe yaml deserialization in llama-hub

n/a llama-hubpipLibraries & packages
Open in ThreatlineRecord JSON
CVSS
9.8Critical
ExploitationNo known exploitationNot in CISA KEV, which does not prove it is unexploitedCISA KEV
Exploit odds (EPSS)1.20%Chance of exploitation activity in the next 30 days, higher than 68% of CVEs. Scored 27 Oct 2026FIRST EPSS
Fixed in0.0.67Fixed versionGitHub
Published21 Jan 2024Updated 27 Oct 2026CVE List

What fixes it

  • 0.0.67llama-hub, pipGitHub
  • 0.0.67llama-hub, PyPIOSVpip install "llama-hub>=0.0.67"

A fixed version on one release line is not the upgrade target for every line. Check your exact version and any vendor backports.

Description

The OpenAPI and ChatGPT plugin loaders in LlamaHub (aka llama-hub) before 0.0.67 allow attackers to execute arbitrary code because safe_load is not used for YAML.

Text from CVE List

Affected versions 53

  • llama-hub, pip< 0.0.67GitHub
  • n/aaffected: n/aCVE List
  • llama-hub, PyPIfrom first release, fixed in 0.0.67OSV
  • llama-hub, PyPI0.0.1OSV
  • llama-hub, PyPI0.0.10OSV
  • llama-hub, PyPI0.0.11OSV
  • llama-hub, PyPI0.0.12OSV
  • llama-hub, PyPI0.0.13OSV
  • llama-hub, PyPI0.0.14OSV
  • llama-hub, PyPI0.0.15OSV
  • llama-hub, PyPI0.0.16OSV
  • llama-hub, PyPI0.0.18OSV
  • llama-hub, PyPI0.0.19OSV
  • llama-hub, PyPI0.0.1a1OSV
  • llama-hub, PyPI0.0.1a2OSV
  • llama-hub, PyPI0.0.2OSV
  • llama-hub, PyPI0.0.21OSV
  • llama-hub, PyPI0.0.22OSV
  • llama-hub, PyPI0.0.23OSV
  • llama-hub, PyPI0.0.24OSV
  • llama-hub, PyPI0.0.24.post1OSV
  • llama-hub, PyPI0.0.25OSV
  • llama-hub, PyPI0.0.26OSV
  • llama-hub, PyPI0.0.27OSV
  • llama-hub, PyPI0.0.29OSV
  • llama-hub, PyPI0.0.3OSV
  • llama-hub, PyPI0.0.30OSV
  • llama-hub, PyPI0.0.31OSV
  • llama-hub, PyPI0.0.32OSV
  • llama-hub, PyPI0.0.33OSV
  • llama-hub, PyPI0.0.34OSV
  • llama-hub, PyPI0.0.35OSV
  • llama-hub, PyPI0.0.36OSV
  • llama-hub, PyPI0.0.37OSV
  • llama-hub, PyPI0.0.38OSV
  • llama-hub, PyPI0.0.39OSV
  • llama-hub, PyPI0.0.4OSV
  • llama-hub, PyPI0.0.40OSV
  • llama-hub, PyPI0.0.41OSV
  • llama-hub, PyPI0.0.42OSV
  • llama-hub, PyPI0.0.43OSV
  • llama-hub, PyPI0.0.44OSV
  • llama-hub, PyPI0.0.45OSV
  • llama-hub, PyPI0.0.46OSV
  • llama-hub, PyPI0.0.47OSV
  • llama-hub, PyPI0.0.47.post1OSV
  • llama-hub, PyPI0.0.48OSV
  • llama-hub, PyPI0.0.5OSV
  • llama-hub, PyPI0.0.50OSV
  • llama-hub, PyPI0.0.52OSV
  • llama-hub, PyPI0.0.54OSV
  • llama-hub, PyPI0.0.55OSV
  • llama-hub, PyPI0.0.55.post1OSV

References 8