Skip to main content
cve.nowby Sazabi
← PyPI
PyPIPackage

llama-index

22 known vulnerabilities (3 critical, 12 high, 6 medium), with the versions each affects and the releases that fix them.

Latest release
0.14.25 (Sep 21, 2026): no advisory affects it
Newest unaffected release
0.14.25 (Sep 21, 2026), the latest release
Advisories
22 · 3 critical, 12 high, 6 medium
Weekly downloads
415K
Dependents
251
Releases
500+ since 0.4.7 (Feb 20, 2023)
Registry
PyPI
Releases read
Nov 8, 2026

Version timeline

Show all 22 advisoriesShow fewer advisories
Every release cve.now has on record, lowest version on the left; each bar is a run of versions an advisory affects. Older releases aren't stored, so the earliest spans may start sooner.

Advisories 22

  • LlamaIndex <= 0.11.6 BGEM3Index Unsafe Deserialization

    Affected: fixed in 0.11.7.

    Fixed in 0.11.7 (released Sep 7, 2024, 492 days before disclosure).

    The latest release, 0.14.25, is not affected.

  • LlamaIndex <= 0.12.2 VannaQueryEngine SQL Execution Allows Resource Exhaustion

    Affected: fixed in 0.12.3.

    Fixed in 0.12.3 (released Dec 6, 2024, 402 days before disclosure).

    The latest release, 0.14.25, is not affected.

  • World-Writable NLTK Cache Directory Vulnerability in run-llama/llama_index

    Affected: fixed in 0.13.0.

    Fixed in 0.13.0 (released Jul 31, 2025, 74 days before disclosure).

    The latest release, 0.14.25, is not affected.

  • CVE-2025-6211Medium 6.5

    MD5 Hash Collision in run-llama/llama_index

    Affected: fixed in 0.12.41.

    Fixed in 0.12.41 (released Jun 7, 2025, 33 days before disclosure).

    The latest release, 0.14.25, is not affected.

  • Arbitrary File Read through Path Traversal in run-llama/llama_index

    Affected: from 0.12.27, fixed in 0.12.41.

    Fixed in 0.12.41 (released Jun 7, 2025, 30 days before disclosure).

    The latest release, 0.14.25, is not affected.

  • CVE-2025-5472Medium 6.5

    Denial of Service via Uncontrolled Recursive JSON Parsing in JSONReader in run-llama/llama_index

    Affected: from 0.12.28, fixed in 0.12.38.

    Fixed in 0.12.38 (released May 29, 2025, 39 days before disclosure).

    The latest release, 0.14.25, is not affected.

  • CVE-2025-6210Medium 6.2

    Hardlink-Based Path Traversal in run-llama/llama_index

    Affected: fixed in 0.5.2.

    Fixed in 0.5.2 (released Mar 30, 2023, 830 days before disclosure).

    The latest release, 0.14.25, is not affected.

  • Path Traversal via Symbolic Links in run-llama/llama_index

    Affected: from 0.12.23, fixed in 0.12.28.

    Fixed in 0.12.28 (released Apr 2, 2025, 96 days before disclosure).

    The latest release, 0.14.25, is not affected.

  • CVE-2025-3044Medium 5.3

    MD5 Hash Collision in run-llama/llama_index

    Affected: fixed in 0.12.28.

    Fixed in 0.12.28 (released Apr 2, 2025, 96 days before disclosure).

    The latest release, 0.14.25, is not affected.

  • XML Entity Expansion vulnerability in run-llama/llama_index

    Affected: from 0.12.21, fixed in 0.12.29.

    Fixed in 0.12.29 (released Apr 9, 2025, 89 days before disclosure).

    The latest release, 0.14.25, is not affected.

  • CVE-2025-3108Medium 5.0

    Unsafe Deserialization in JsonPickleSerializer Enables Remote Code Execution in run-llama/llama_index

    Affected: from 0.12.27, fixed in 0.12.41.

    Fixed in 0.12.41 (released Jun 7, 2025, 29 days before disclosure).

    The latest release, 0.14.25, is not affected.

  • CVE-2025-1793Critical 9.8

    SQL Injection in run-llama/llama_index

    Affected: fixed in 0.12.28.

    Fixed in 0.12.28 (released Apr 2, 2025, 64 days before disclosure).

    The latest release, 0.14.25, is not affected.

  • CVE-2025-1750Critical 9.8

    SQL Injection in run-llama/llama_index

    Affected: from 0.12.19, fixed in 0.12.21.

    Fixed in 0.12.21 (released Feb 28, 2025, 94 days before disclosure).

    The latest release, 0.14.25, is not affected.

  • Command Injection in LLama-Index CLI in run-llama/llama_index

    Affected: through 0.12.20.

    Fixed in 0.12.21 (released Feb 28, 2025, 89 days before disclosure), the first release outside every affected range (no listed fixed version clears them all).

    The latest release, 0.14.25, is not affected.

  • Denial of Service in run-llama/llama_index

    Affected: from 0.12.15, fixed in 0.12.21.

    Fixed in 0.12.21 (released Feb 28, 2025, 71 days before disclosure).

    The latest release, 0.14.25, is not affected.

Show all 22 advisoriesShow fewer advisories

  • SQL Injection in run-llama/llama_index

    Affected: fixed in 0.12.3.

    Fixed in 0.12.3 (released Dec 6, 2024, 104 days before disclosure).

    The latest release, 0.14.25, is not affected.

  • CVE-2024-12910Medium 4.2

    Denial of Service in run-llama/llama_index

    Affected: fixed in 0.12.9; fixed in 0.12.9.

    Fixed in 0.12.9 (released Dec 31, 2024, 79 days before disclosure).

    The latest release, 0.14.25, is not affected.

  • Denial of Service (DoS) in run-llama/llama_index

    Affected: through 0.12.5.

    Fixed in 0.12.6 (released Dec 18, 2024, 92 days before disclosure), the first release outside every affected range (no listed fixed version clears them all).

    The latest release, 0.14.25, is not affected.

  • An issue was discovered in llama_index before 0.10.38.

    Affected: fixed in 0.10.38.

    Fixed in 0.10.38 (released May 22, 2024, 92 days before disclosure).

    The latest release, 0.14.25, is not affected.

  • Command Injection in run-llama/llama_index

    Affected: from 0.9.47, fixed in 0.10.13; fixed in 0.10.13.

    Fixed in 0.10.13 (released Feb 26, 2024, 80 days before disclosure).

    The latest release, 0.14.25, is not affected.

  • CVE-2024-23751Critical 9.8

    LlamaIndex (aka llama_index) through 0.9.34 allows SQL injection via the Text-to-SQL feature in NLSQLTableQueryEngine…

    Affected: fixed in 0.9.35; through 0.9.35.

    Fixed in 0.9.36 (released Jan 23, 2024, 1 day after disclosure), the first release outside every affected range (no listed fixed version clears them all).

    The latest release, 0.14.25, is not affected.

  • An issue in llama_index v.0.7.13 and before allows a remote attacker to execute arbitrary code via the `exec` parameter in…

    Affected: fixed in 0.7.14; fixed in 0.9.14.

    Fixed in 0.9.14 (released Dec 11, 2023, 118 days after disclosure).

    The latest release, 0.14.25, is not affected.