Parisneo vulnerabilities
84 CVEs and advisories name Parisneo as an affected vendor, newest first. Follow it as a feed.
- CVE-2026-10595Path Traversal Vulnerability in parisneo/lollms
- CVE-2026-12228Stored XSS in Direct Messages via Prompt Sharing in parisneo/lollms
- CVE-2026-1116Cross-site Scripting (XSS) in parisneo/lollms
- CVE-2026-1115Stored XSS in parisneo/lollms
- CVE-2026-1163Insufficient Session Expiration in parisneo/lollms
- CVE-2026-1114Improper Access Control via Weak JWT Token in parisneo/lollms
- CVE-2026-0558Unauthenticated File Upload in parisneo/lollms
- CVE-2026-0560Server-Side Request Forgery (SSRF) in parisneo/lollms
- CVE-2026-0562Insecure Direct Object Reference (IDOR) in parisneo/lollms
- CVE-2026-33340LoLLMs WEBUI has unauthenticated Server-Side Request Forgery (SSRF) in /api/proxy endpoint
- CVE-2024-2356Remote Code Execution due to LFI in '/reinstall_extension' in parisneo/lollms-webui
- CVE-2026-1117Improper Access Control in parisneo/lollms
- CVE-2025-6386Timing Attack Vulnerability in parisneo/lollms
- CVE-2024-12766SSRF in parisneo/lollms-webui
- CVE-2024-8736Denial of Service (DoS) via Multipart Boundary in parisneo/lollms-webui
- CVE-2024-8898Path Traversal in parisneo/lollms-webui
- CVE-2025-1451Insufficient Patch Leading to DoS in parisneo/lollms-webui
- CVE-2024-6986Cross-site Scripting (XSS) in parisneo/lollms-webui
- CVE-2024-6982Remote Code Execution in Calculate Function in parisneo/lollms
- CVE-2024-10019Path Traversal and OS Command Injection in parisneo/lollms-webui
- CVE-2024-9920Unrestricted File Upload and Execution in parisneo/lollms-webui
- CVE-2024-9919Missing Authentication Check in parisneo/lollms-webui
- CVE-2024-7058Relative Path Traversal in parisneo/lollms-webui
- CVE-2024-10047Directory Listing Vulnerability in parisneo/lollms-webui
- CVE-2024-9597Path Traversal in parisneo/lollms
- CVE-2024-8581Path Traversal in parisneo/lollms-webui
- CVE-2024-11302Missing check_access in lollms_binding_infos in parisneo/lollms
- CVE-2024-5125XSS and Open Redirect via SVG File Upload in parisneo/lollms-webui
- CVE-2024-6673CSRF Vulnerability in parisneo/lollms-webui
- CVE-2024-6581Remote Code Execution due to Stored XSS in parisneo/lollms