CVE-2024-23730Critical· 9.8▾ MidnightUnsafe yaml deserialization in llama-hub
▾ Midnight zone — Critical, or high with PoC / in-the-wild
impact 53.9 · likelihood 0.2 · exploitation 0
Need a working PoC? Pro members can cast a request and our team develops one — it lands right here.
Exploit-prediction probability, daily snapshots since Oct 27.
Disclosure to exploitation, from the record and what we observed since indexing it.
Disclosed via OSV
Last analysed / modified upstream
1.2%
The OpenAPI and ChatGPT plugin loaders in LlamaHub (aka llama-hub) before 0.0.67 allow attackers to execute arbitrary code because safe_load is not used for YAML.
llama-hub < 0.0.67Upgrade to a patched release:
llama-hub 0.0.67Connected by shared product, vendor, weakness, or advisory.
CVE-2024-10553Critical· 9.8H2O Deserialization of Untrusted Data Vulnerability
CVE-2024-10190Critical· 9.8Horovod Vulnerable to Command Injection
CVE-2025-49655Critical· 9.8Keras framework vulnerable to deserialization of untrusted data
CVE-2024-8502Critical· 9.8AgentScope Deserialization Vulnerability
CVE-2024-9070Critical· 9.8BentoML deserialization vulnerability
CVE-2025-15438Medium· 4.7A vulnerability was determined in PluXml up to 5.8.22