Awesome Llm Apps vulnerabilities

2 known vulnerabilities in Awesome Llm Apps from Theunwindai. 2 are rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.

Latest first

• 8.2 High severity

  Awesome Llm Apps: Exposure of Sensitive Information to an Unauthorized Actor

  CVE-2026-29872Mar 30, 2026Theunwindai

  A cross-session information disclosure vulnerability exists in the awesome-llm-apps project in commit e46690f99c3f08be80a9877fab52acacf7ab8251 (2026-01-19). The affected Streamlit-based GitHub MCP Agent stores user-supplied API tokens in process-wide environme

• 7.5 High severity

  Awesome Llm Apps: Improper Limitation of a Pathname to a Restricted Directory

  CVE-2026-29871Mar 27, 2026Theunwindai

  A path traversal vulnerability exists in the awesome-llm-apps project in commit e46690f99c3f08be80a9877fab52acacf7ab8251 (2026-01-19) in the Beifong AI News and Podcast Agent backend in FastAPI backend, stream-audio endpoint, in file routers/podcast_router.py,