# llama-index (PyPI) vulnerabilities 22 known vulnerabilities (3 critical, 12 high, 6 medium), with the versions each affects and the releases that fix them. ## At a glance - Latest release: 0.14.25 (Sep 21, 2026): no advisory affects it - Newest unaffected release: 0.14.25 (Sep 21, 2026), the latest release - Weekly downloads: 415K - Dependents: 251 - Releases: 500+ since 0.4.7 (Feb 20, 2023) - Registry: https://pypi.org/project/llama-index/ - Releases read: Nov 8, 2026 ## Version timeline Affected versions per advisory, in version order: - CVE-2024-14021: 0.4.7 to 0.11.6 (0.11.7 is outside it) - CVE-2024-58339: 0.4.7 to 0.12.2 (0.12.3 is outside it) - CVE-2025-7707: 0.4.7 to 0.12.52 (0.13.0 is outside it) - CVE-2025-6211: 0.4.7 to 0.12.40 (0.12.41 is outside it) - CVE-2025-6209: 0.12.27 to 0.12.40 (0.12.41 is outside it) - CVE-2025-5472: 0.12.28 to 0.12.37 (0.12.38 is outside it) - CVE-2025-6210: 0.4.7 to 0.5.1 (0.5.2 is outside it) - CVE-2025-3046: 0.12.23 to 0.12.27 (0.12.28 is outside it) - CVE-2025-3044: 0.4.7 to 0.12.27 (0.12.28 is outside it) - CVE-2025-3225: 0.12.21 to 0.12.28 (0.12.29 is outside it) - CVE-2025-3108: 0.12.27 to 0.12.40 (0.12.41 is outside it) - CVE-2025-1793: 0.4.7 to 0.12.27 (0.12.28 is outside it) - CVE-2025-1750: 0.12.19 to 0.12.20 (0.12.21 is outside it) - CVE-2025-1753: 0.4.7 to 0.12.20 (0.12.21 is outside it) - CVE-2025-1752: 0.12.15 to 0.12.20 (0.12.21 is outside it) - CVE-2024-12911: 0.4.7 to 0.12.2 (0.12.3 is outside it) - CVE-2024-12910: 0.4.7 to 0.12.8 (0.12.9 is outside it) - CVE-2024-12704: 0.4.7 to 0.12.5 (0.12.6 is outside it) - CVE-2024-45201: 0.4.7 to 0.10.37 (0.10.38 is outside it) - CVE-2024-4181: 0.4.7 to 0.10.12 (0.10.13 is outside it) - CVE-2024-23751: 0.4.7 to 0.9.35 (0.9.36 is outside it) - CVE-2023-39662: 0.4.7 to 0.9.13 (0.9.14 is outside it) Older releases aren't stored, so the earliest spans may start sooner. ## Advisories (22) ### [CVE-2024-14021](https://cve.now/CVE-2024-14021): LlamaIndex \<= 0.11.6 BGEM3Index Unsafe Deserialization - Severity: High 8.4 - Published: Jan 12, 2026 - Affected: fixed in 0.11.7. - Fixed in 0.11.7 (released Sep 7, 2024, 492 days before disclosure). - The latest release, 0.14.25, is not affected. ### [CVE-2024-58339](https://cve.now/CVE-2024-58339): LlamaIndex \<= 0.12.2 VannaQueryEngine SQL Execution Allows Resource Exhaustion - Severity: High 8.7 - Published: Jan 12, 2026 - Affected: fixed in 0.12.3. - Fixed in 0.12.3 (released Dec 6, 2024, 402 days before disclosure). - The latest release, 0.14.25, is not affected. ### [CVE-2025-7707](https://cve.now/CVE-2025-7707): World-Writable NLTK Cache Directory Vulnerability in run-llama/llama\_index - Severity: High 7.1 - Published: Oct 13, 2025 - Affected: fixed in 0.13.0. - Fixed in 0.13.0 (released Jul 31, 2025, 74 days before disclosure). - The latest release, 0.14.25, is not affected. ### [CVE-2025-6211](https://cve.now/CVE-2025-6211): MD5 Hash Collision in run-llama/llama\_index - Severity: Medium 6.5 - Published: Jul 10, 2025 - Affected: fixed in 0.12.41. - Fixed in 0.12.41 (released Jun 7, 2025, 33 days before disclosure). - The latest release, 0.14.25, is not affected. ### [CVE-2025-6209](https://cve.now/CVE-2025-6209): Arbitrary File Read through Path Traversal in run-llama/llama\_index - Severity: High 7.5 - Published: Jul 7, 2025 - Affected: from 0.12.27, fixed in 0.12.41. - Fixed in 0.12.41 (released Jun 7, 2025, 30 days before disclosure). - The latest release, 0.14.25, is not affected. ### [CVE-2025-5472](https://cve.now/CVE-2025-5472): Denial of Service via Uncontrolled Recursive JSON Parsing in JSONReader in run-llama/llama\_index - Severity: Medium 6.5 - Published: Jul 7, 2025 - Affected: from 0.12.28, fixed in 0.12.38. - Fixed in 0.12.38 (released May 29, 2025, 39 days before disclosure). - The latest release, 0.14.25, is not affected. ### [CVE-2025-6210](https://cve.now/CVE-2025-6210): Hardlink-Based Path Traversal in run-llama/llama\_index - Severity: Medium 6.2 - Published: Jul 7, 2025 - Affected: fixed in 0.5.2. - Fixed in 0.5.2 (released Mar 30, 2023, 830 days before disclosure). - The latest release, 0.14.25, is not affected. ### [CVE-2025-3046](https://cve.now/CVE-2025-3046): Path Traversal via Symbolic Links in run-llama/llama\_index - Severity: High 7.5 - Published: Jul 7, 2025 - Affected: from 0.12.23, fixed in 0.12.28. - Fixed in 0.12.28 (released Apr 2, 2025, 96 days before disclosure). - The latest release, 0.14.25, is not affected. ### [CVE-2025-3044](https://cve.now/CVE-2025-3044): MD5 Hash Collision in run-llama/llama\_index - Severity: Medium 5.3 - Published: Jul 7, 2025 - Affected: fixed in 0.12.28. - Fixed in 0.12.28 (released Apr 2, 2025, 96 days before disclosure). - The latest release, 0.14.25, is not affected. ### [CVE-2025-3225](https://cve.now/CVE-2025-3225): XML Entity Expansion vulnerability in run-llama/llama\_index - Severity: High 7.5 - Published: Jul 7, 2025 - Affected: from 0.12.21, fixed in 0.12.29. - Fixed in 0.12.29 (released Apr 9, 2025, 89 days before disclosure). - The latest release, 0.14.25, is not affected. ### [CVE-2025-3108](https://cve.now/CVE-2025-3108): Unsafe Deserialization in JsonPickleSerializer Enables Remote Code Execution in run-llama/llama\_index - Severity: Medium 5.0 - Published: Jul 6, 2025 - Affected: from 0.12.27, fixed in 0.12.41. - Fixed in 0.12.41 (released Jun 7, 2025, 29 days before disclosure). - The latest release, 0.14.25, is not affected. ### [CVE-2025-1793](https://cve.now/CVE-2025-1793): SQL Injection in run-llama/llama\_index - Severity: Critical 9.8 - Published: Jun 5, 2025 - Affected: fixed in 0.12.28. - Fixed in 0.12.28 (released Apr 2, 2025, 64 days before disclosure). - The latest release, 0.14.25, is not affected. ### [CVE-2025-1750](https://cve.now/CVE-2025-1750): SQL Injection in run-llama/llama\_index - Severity: Critical 9.8 - Published: Jun 2, 2025 - Affected: from 0.12.19, fixed in 0.12.21. - Fixed in 0.12.21 (released Feb 28, 2025, 94 days before disclosure). - The latest release, 0.14.25, is not affected. ### [CVE-2025-1753](https://cve.now/CVE-2025-1753): Command Injection in LLama-Index CLI in run-llama/llama\_index - Severity: High 7.8 - Published: May 28, 2025 - Affected: through 0.12.20. - Fixed in 0.12.21 (released Feb 28, 2025, 89 days before disclosure), the first release outside every affected range (no listed fixed version clears them all). - The latest release, 0.14.25, is not affected. ### [CVE-2025-1752](https://cve.now/CVE-2025-1752): Denial of Service in run-llama/llama\_index - Severity: High 7.5 - Published: May 10, 2025 - Affected: from 0.12.15, fixed in 0.12.21. - Fixed in 0.12.21 (released Feb 28, 2025, 71 days before disclosure). - The latest release, 0.14.25, is not affected. ### [CVE-2024-12911](https://cve.now/CVE-2024-12911): SQL Injection in run-llama/llama\_index - Severity: High 7.1 - Published: Mar 20, 2025 - Affected: fixed in 0.12.3. - Fixed in 0.12.3 (released Dec 6, 2024, 104 days before disclosure). - The latest release, 0.14.25, is not affected. ### [CVE-2024-12910](https://cve.now/CVE-2024-12910): Denial of Service in run-llama/llama\_index - Severity: Medium 4.2 - Published: Mar 20, 2025 - Affected: fixed in 0.12.9; fixed in 0.12.9. - Fixed in 0.12.9 (released Dec 31, 2024, 79 days before disclosure). - The latest release, 0.14.25, is not affected. ### [CVE-2024-12704](https://cve.now/CVE-2024-12704): Denial of Service (DoS) in run-llama/llama\_index - Severity: High 7.5 - Published: Mar 20, 2025 - Affected: through 0.12.5. - Fixed in 0.12.6 (released Dec 18, 2024, 92 days before disclosure), the first release outside every affected range (no listed fixed version clears them all). - The latest release, 0.14.25, is not affected. ### [CVE-2024-45201](https://cve.now/CVE-2024-45201): An issue was discovered in llama\_index before 0.10.38. - Severity: High 8.8 - Published: Aug 22, 2024 - Affected: fixed in 0.10.38. - Fixed in 0.10.38 (released May 22, 2024, 92 days before disclosure). - The latest release, 0.14.25, is not affected. ### [CVE-2024-4181](https://cve.now/CVE-2024-4181): Command Injection in run-llama/llama\_index - Severity: High 8.8 - Published: May 16, 2024 - Affected: from 0.9.47, fixed in 0.10.13; fixed in 0.10.13. - Fixed in 0.10.13 (released Feb 26, 2024, 80 days before disclosure). - The latest release, 0.14.25, is not affected. ### [CVE-2024-23751](https://cve.now/CVE-2024-23751): LlamaIndex (aka llama\_index) through 0.9.34 allows SQL injection via the Text-to-SQL feature in NLSQLTableQueryEngine… - Severity: Critical 9.8 - Published: Jan 22, 2024 - Affected: fixed in 0.9.35; through 0.9.35. - Fixed in 0.9.36 (released Jan 23, 2024, 1 day after disclosure), the first release outside every affected range (no listed fixed version clears them all). - The latest release, 0.14.25, is not affected. ### [CVE-2023-39662](https://cve.now/CVE-2023-39662): An issue in llama\_index v.0.7.13 and before allows a remote attacker to execute arbitrary code via the \`exec\` parameter in… - Severity: Unrated - Published: Aug 15, 2023 - Affected: fixed in 0.7.14; fixed in 0.9.14. - Fixed in 0.9.14 (released Dec 11, 2023, 118 days after disclosure). - The latest release, 0.14.25, is not affected. --- Source: cve.now Built by [Sazabi](https://www.sazabi.com/?utm_source=cve-now&utm_medium=markdown), AI-native observability and security: automatic issue detection, plain-language log search and live dashboards. Page: https://cve.now/packages/pypi/llama-index Site guide for agents: https://cve.now/llms.txt Uses NVD data; not endorsed by NVD.