Homepage
About Snyk

llama-cpp-python@0.1.14 vulnerabilities

Python bindings for the llama.cpp library

Go back to all versions of this package
Report a new vulnerability Found a mistake?

Direct Vulnerabilities

Known vulnerabilities in the llama-cpp-python package. This does not include vulnerabilities belonging to this package’s dependencies.

Automatically find and fix vulnerabilities affecting your projects. Snyk scans for vulnerabilities and provides fixes for free.
Fix for free
Vulnerability Vulnerable Version
  • H
Arbitrary Code Execution

llama-cpp-python is a Python bindings for the llama.cpp library

Affected versions of this package are vulnerable to Arbitrary Code Execution due to improper Llama._create_completion suffix parameter check, allows an attacker to send string-like object which could actually lead to exploitation of this vulnerability.

How to fix Arbitrary Code Execution?

Upgrade llama-cpp-python to version 0.2.12 or higher.

[,0.2.12)
Go back to all versions of this package