- Latest release
- Not known: cve.now hasn't read this package's releases
- Newest unaffected release
- Not known without release data
- Advisories
- 10 · 2 critical, 5 high, 3 medium
- Registry
- PyPI
Advisories 10
- CVE-2025-6208Medium 5.3
Uncontrolled Memory Consumption in run-llama/llama_index
Affected: fixed in 0.12.41.
- CVE-2025-7647High 7.3
Insecure Temporary File Handling in run-llama/llama_index
Affected: fixed in 0.13.0.
- CVE-2025-5302High 8.6
Denial of Service (DOS) in JSONReader in run-llama/llama_index
Affected: fixed in 0.12.38.
- CVE-2025-6209High 7.5
Arbitrary File Read through Path Traversal in run-llama/llama_index
Affected: from 0.11.23, fixed in 0.12.41.
- CVE-2025-5472Medium 6.5
Denial of Service via Uncontrolled Recursive JSON Parsing in JSONReader in run-llama/llama_index
Affected: fixed in 0.12.38.
- CVE-2025-3108Medium 5.0
Unsafe Deserialization in JsonPickleSerializer Enables Remote Code Execution in run-llama/llama_index
Affected: from 0.11.15, fixed in 0.12.41.
- CVE-2024-12704High 7.5
Denial of Service (DoS) in run-llama/llama_index
Affected: fixed in 0.12.6.
- CVE-2024-45201High 8.8
An issue was discovered in llama_index before 0.10.38.
Affected: fixed in 0.10.38.
- CVE-2024-3271Critical 9.8
Command Injection in run-llama/llama_index
Affected: fixed in 0.10.24.
- CVE-2024-3098Critical 9.8
Prompt Injection leading to Arbitrary Code Execution in run-llama/llama_index
Affected: fixed in 0.10.24.