Andyyyy64 vulnerabilities
We track 1 vulnerability in Andyyyy64 products. 1 is rated high or critical, and none are known to be exploited. The most recent was published on August 26, 2026.
1vulnerabilities
0critical
1high
0exploited
8.8average CVSS score
Latest Andyyyy64 vulnerabilities
- 8.8 High severity
whichllm: Improper Control of Generation of Code
whichllm before 0.5.16 contains a code injection vulnerability in the run and snippet commands that allows a remote attacker who controls a HuggingFace repository to achieve arbitrary code execution by crafting a malicious GGUF filename containing double quote