All products

llama-index-core

PyPI · Package
10 reports
Vulnerability alerts
Follow
ReportProductEcosystemSeverityFix statusLast updated
llama-index-core Prompt Injection vulnerability leading to Arbitrary Code ExecutionCVE-2024-3098 · GHSA-WVPX-G427-Q9WCVersion ranges need review. llama-index-core PyPI Critical Fix reported
llama-index-core insecurely handles temporary filesCVE-2025-7647 · GHSA-CR7Q-2W66-HJCMVersion ranges need review. llama-index-coreOpenShift Lightspeed/openshift-lightspeed-tech-preview/lightspeed-rag-tool-rhel9 PyPIRed Hat High Fix reported
LlamaIndex Improper Handling of Exceptional Conditions vulnerabilityCVE-2024-12704 · GHSA-J3WR-M6XH-64HGVersion ranges need review. llama-index-corellama-index PyPIRed Hat High Fix reported
LlamaIndex vulnerable to DoS attack through uncontrolled recursive JSON parsingCVE-2025-5472 · GHSA-3WXX-Q3GV-PVVVVersion ranges need review. llama-index-corellama-index PyPIRed Hat Medium Fix reported
LlamaIndex has Incomplete Documentation of Program Execution related to JsonPickleSerializer componentCVE-2025-3108 · GHSA-M84C-4C34-28GFVersion ranges need review. llama-index-corellama-index PyPI Medium Fix reported
LlamaIndex affected by a Denial of Service (DOS) in JSONReaderCVE-2025-5302 · GHSA-7753-XRFW-CH36Version ranges need review. llama-index-core PyPI High Fix reported
LlamaIndex vulnerable to Path Traversal attack through its encode_image functionCVE-2025-6209 · GHSA-2RHQ-96Q8-4VJQVersion ranges need review. llama-index-corellama-index PyPIRed Hat High Fix reported
llama-index-core vulnerable to Uncontrolled Resource ConsumptionCVE-2025-6208 · GHSA-488G-HW5F-X29PVersion ranges need review. llama-index-coreOpenShift Lightspeed/openshift-lightspeed-tech-preview/lightspeed-rag-tool-rhel9 PyPIRed Hat Medium Fix reported
LlamaIndex includes an exec call for `import {cls_name}`CVE-2024-45201 · GHSA-FXC2-8M62-M85XVersion ranges need review. llama-index-corellama-index PyPI Critical Fix reported
llama-index-core Command Injection vulnerabilityCVE-2024-3271 · GHSA-R6GP-RFF2-P3HFVersion ranges need review. llama-index-core PyPI Critical Fix reported