CVE Tools

Parisneo

65 CVEs tracked since 2024. Since Apr 2024, none of them reached CISA KEV.

Parisneo CVEs per month

Apr 2024 to Oct 2026. Point at a month, or focus the strip and use the arrow keys.
Parisneo CVEs per month, with the share now in CISA KEV
MonthCVEsIn CISA KEV
2024-0470
2024-05110
2024-06270
2024-074 or fewer
2024-084 or fewer
2024-093 or fewer
2024-1060
2024-114 or fewer
2024-123 or fewer
2025-014 or fewer
2025-023 or fewer
2025-03140
2025-044 or fewer
2025-054 or fewer
2025-064 or fewer
2025-075 or fewer
2025-084 or fewer
2025-094 or fewer
2025-104 or fewer
2025-114 or fewer
2025-125 or fewer
2026-015 or fewer
2026-025 or fewer
2026-037 or fewer
2026-046 or fewer
2026-057 or fewer
2026-067 or fewer
2026-077 or fewer
2026-088 or fewer
2026-099 or fewer
2026-106 or fewer

Products

The products that kept showing up in Parisneo's monthly top three, with their CVEs summed over those months.

  1. Parisneo/lollms-webui485 months
  2. Parisneo/lollms174 months
  3. Lollms Web Ui11 month

Latest CVEs

The 15 most recently published vulnerabilities affecting Parisneo.

  1. CVE-2026-10595Path Traversal Vulnerability in parisneo/lollms7.5
  2. CVE-2026-12228Stored XSS in Direct Messages via Prompt Sharing in parisneo/lollms5.4
  3. CVE-2026-1116Cross-site Scripting (XSS) in parisneo/lollms6.1
  4. CVE-2026-1115Stored XSS in parisneo/lollms9.6
  5. CVE-2026-1163Insufficient Session Expiration in parisneo/lollms4.1
  6. CVE-2026-1114Improper Access Control via Weak JWT Token in parisneo/lollms9.8
  7. CVE-2026-0558Unauthenticated File Upload in parisneo/lollms9.8
  8. CVE-2026-0560Server-Side Request Forgery (SSRF) in parisneo/lollms7.5
  9. CVE-2026-0562Insecure Direct Object Reference (IDOR) in parisneo/lollms8.3
  10. CVE-2026-33340LoLLMs WEBUI has unauthenticated Server-Side Request Forgery (SSRF) in /api/proxy endpoint9.1
  11. CVE-2024-2356Remote Code Execution due to LFI in '/reinstall_extension' in parisneo/lollms-webui9.6
  12. CVE-2026-1117Improper Access Control in parisneo/lollms8.2
  13. CVE-2025-6386Timing Attack Vulnerability in parisneo/lollms7.5
  14. CVE-2024-12766SSRF in parisneo/lollms-webui7.5
  15. CVE-2024-8736Denial of Service (DoS) via Multipart Boundary in parisneo/lollms-webui6.5

The record

Peak rank
#30 in Jun 2024
Busiest month shown
Jun 2024, 27 CVEs
Months with a KEV entry
0 since Apr 2024
Monthly snapshots
5 since 2024
Parisneo's full record, month by month