Parisneo
65 CVEs tracked since 2024. Since Apr 2024, none of them reached CISA KEV.
Parisneo CVEs per month
| Month | CVEs | In CISA KEV |
|---|---|---|
| 2024-04 | 7 | 0 |
| 2024-05 | 11 | 0 |
| 2024-06 | 27 | 0 |
| 2024-07 | 4 or fewer | |
| 2024-08 | 4 or fewer | |
| 2024-09 | 3 or fewer | |
| 2024-10 | 6 | 0 |
| 2024-11 | 4 or fewer | |
| 2024-12 | 3 or fewer | |
| 2025-01 | 4 or fewer | |
| 2025-02 | 3 or fewer | |
| 2025-03 | 14 | 0 |
| 2025-04 | 4 or fewer | |
| 2025-05 | 4 or fewer | |
| 2025-06 | 4 or fewer | |
| 2025-07 | 5 or fewer | |
| 2025-08 | 4 or fewer | |
| 2025-09 | 4 or fewer | |
| 2025-10 | 4 or fewer | |
| 2025-11 | 4 or fewer | |
| 2025-12 | 5 or fewer | |
| 2026-01 | 5 or fewer | |
| 2026-02 | 5 or fewer | |
| 2026-03 | 7 or fewer | |
| 2026-04 | 6 or fewer | |
| 2026-05 | 7 or fewer | |
| 2026-06 | 7 or fewer | |
| 2026-07 | 7 or fewer | |
| 2026-08 | 8 or fewer | |
| 2026-09 | 9 or fewer | |
| 2026-10 | 6 or fewer |
Products
The products that kept showing up in Parisneo's monthly top three, with their CVEs summed over those months.
Latest CVEs
The 15 most recently published vulnerabilities affecting Parisneo.
- CVE-2026-10595Path Traversal Vulnerability in parisneo/lollms7.5
- CVE-2026-12228Stored XSS in Direct Messages via Prompt Sharing in parisneo/lollms5.4
- CVE-2026-1116Cross-site Scripting (XSS) in parisneo/lollms6.1
- CVE-2026-1115Stored XSS in parisneo/lollms9.6
- CVE-2026-1163Insufficient Session Expiration in parisneo/lollms4.1
- CVE-2026-1114Improper Access Control via Weak JWT Token in parisneo/lollms9.8
- CVE-2026-0558Unauthenticated File Upload in parisneo/lollms9.8
- CVE-2026-0560Server-Side Request Forgery (SSRF) in parisneo/lollms7.5
- CVE-2026-0562Insecure Direct Object Reference (IDOR) in parisneo/lollms8.3
- CVE-2026-33340LoLLMs WEBUI has unauthenticated Server-Side Request Forgery (SSRF) in /api/proxy endpoint9.1
- CVE-2024-2356Remote Code Execution due to LFI in '/reinstall_extension' in parisneo/lollms-webui9.6
- CVE-2026-1117Improper Access Control in parisneo/lollms8.2
- CVE-2025-6386Timing Attack Vulnerability in parisneo/lollms7.5
- CVE-2024-12766SSRF in parisneo/lollms-webui7.5
- CVE-2024-8736Denial of Service (DoS) via Multipart Boundary in parisneo/lollms-webui6.5
The record
- Peak rank
- #30 in Jun 2024
- Busiest month shown
- Jun 2024, 27 CVEs
- Months with a KEV entry
- 0 since Apr 2024
- Monthly snapshots
- 5 since 2024