PT-2026-6498 · Pypi · Llama Stack

Publicado 2026-01-30 · Atualizado 2026-01-30

OSV

CVSS v3.1

3.2

Baixa

Vetor base

AV:L/AC:H/PR:N/UI:N/S:C/C:L/I:N/A:N

Llama Stack (aka llama-stack) before 0.4.0rc3 does not censor the pgvector password in the initialization log.

Correção

Insertion into Log File

Enumeração de Fraquezas

CWE-532

Identificadores relacionados

GHSA-XMFJ-7PP5-FXR6

Produtos afetados

Llama Stack

Referências · 5

• https://github.com/llamastack/llama-stack · Nota
• https://github.com/llamastack/llama-stack/commit/b709bd77b6c1fad68a30a4888baa6f2337eaef6f · Nota
• https://github.com/llamastack/llama-stack/compare/v0.4.0rc2...v0.4.0rc3 · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2026-25211 · Nota de Segurança
• https://osv.dev/vulnerability/GHSA-xmfj-7pp5-fxr6 · Aviso do Fabricante