Llama Stack exposes secret in initialization log (GHSA-xmfj-7pp5-fxr6) · Sieve

낮음취약점

Llama Stack exposes secret in initialization log

GHSA-xmfj-7pp5-fxr6 · CVE-2026-25211 · PYSEC-2026-1572 · 갱신 2026. 7. 8.

해야 할 일

llama-stack: 0.4.4 이상으로 올리세요.

영향 받는 패키지

생태계	패키지	수정 버전
PyPI	llama-stack	0.4.4

원문

Llama Stack exposes secret in initialization log

Llama Stack (aka llama-stack) before 0.4.0rc3 does not censor the pgvector password in the initialization log.

출처

ADVISORYhttps://nvd.nist.gov/vuln/detail/CVE-2026-25211
WEBhttps://github.com/llamastack/llama-stack/commit/b709bd77b6c1fad68a30a4888baa6f2337eaef6f
PACKAGEhttps://github.com/llamastack/llama-stack
WEBhttps://github.com/llamastack/llama-stack/compare/v0.4.0rc2...v0.4.0rc3

오늘 목록으로