Llama Stack
Approved changes feed: RSS · Atom
cpe:2.3:a:meta_platforms,_inc:llama_stack:*:*:*:*:*:*:*:*
part: a version: * update: *
| Vendor | Meta Platforms, Inc (edb3da68-af06-5361-a64f-afc2bdecbbaa) |
|---|---|
| Product | Llama Stack (1ff82aba-7c90-5b55-a113-f4e14a14ca38) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | * |
| Target hardware | * |
| Other | * |
| Notes | Imported from gcve-enriched-dumps CVE data |
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
| No PURL mappings for this CPE yet. | ||
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2025-55178 |
vulnerable | 2026-06-08 07:33:14.231965 |
Details available
Llama Stack prior to version v0.2.20 accepted unverified parameters in the resolve_ast_by_type function which could potentially allow for remote code execution.
Published: 2025-09-24T18:31:28.309Z
Updated: 2025-09-24T18:50:01.680Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2024-50050 |
vulnerable | 2026-06-08 06:52:08.872801 |
Details available
Llama Stack prior to revision 7a8aa775e5a267cf8660d83140011a0b7f91e005 used pickle as a serialization format for socket communication, potentially allowing for remote code execution. Socket communication has been changed to use JSON instead.
Published: 2024-10-23T13:35:17.320Z
Updated: 2024-10-24T18:26:22.699Z Reference links |
Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.