~ / search / GHSA-xmfj-7pp5-fxr6

GHSA-xmfj-7pp5-fxr6

Llama Stack exposes secret in initialization log

Source: GitHub Advisory Database (reviewed) Low CVE-2026-25211

Packages

EcosystemPackageAffectedFixed in
PyPI llama-stack < 0.4.4 0.4.4

Details

As written in the advisory (Markdown source, shown as plain text).

Llama Stack (aka llama-stack) before 0.4.0rc3 does not censor the pgvector password in the initialization log.

References

External links from the advisory. They lead to third-party sites.