Skip to content
Security
فارسی
Sign in / Register
Vulnerabilities
Products
Plugins
All products
llama-index-core
PyPI
· Package
10 reports
Vulnerability alerts
Follow
Package, identifier or title
Search
Severity
All
Critical
High
Medium
Low
Unknown
Fix status
All
Fix reported
No fix reported
Sort by
Recently updated
Highest severity
Report
Product
Ecosystem
Severity
Fix status
Last updated
llama-index-core Prompt Injection vulnerability leading to Arbitrary Code Execution
CVE-2024-3098 · GHSA-WVPX-G427-Q9WC
Version ranges need review.
llama-index-core
PyPI
Critical
Fix reported
2026-10-27
llama-index-core insecurely handles temporary files
CVE-2025-7647 · GHSA-CR7Q-2W66-HJCM
Version ranges need review.
llama-index-core
OpenShift Lightspeed/openshift-lightspeed-tech-preview/lightspeed-rag-tool-rhel9
PyPI
Red Hat
High
Fix reported
2026-09-10
LlamaIndex Improper Handling of Exceptional Conditions vulnerability
CVE-2024-12704 · GHSA-J3WR-M6XH-64HG
Version ranges need review.
llama-index-core
llama-index
PyPI
Red Hat
High
Fix reported
2026-07-13
LlamaIndex vulnerable to DoS attack through uncontrolled recursive JSON parsing
CVE-2025-5472 · GHSA-3WXX-Q3GV-PVVV
Version ranges need review.
llama-index-core
llama-index
PyPI
Red Hat
Medium
Fix reported
2026-07-13
LlamaIndex has Incomplete Documentation of Program Execution related to JsonPickleSerializer component
CVE-2025-3108 · GHSA-M84C-4C34-28GF
Version ranges need review.
llama-index-core
llama-index
PyPI
Medium
Fix reported
2026-07-13
LlamaIndex affected by a Denial of Service (DOS) in JSONReader
CVE-2025-5302 · GHSA-7753-XRFW-CH36
Version ranges need review.
llama-index-core
PyPI
High
Fix reported
2026-07-07
LlamaIndex vulnerable to Path Traversal attack through its encode_image function
CVE-2025-6209 · GHSA-2RHQ-96Q8-4VJQ
Version ranges need review.
llama-index-core
llama-index
PyPI
Red Hat
High
Fix reported
2026-07-07
llama-index-core vulnerable to Uncontrolled Resource Consumption
CVE-2025-6208 · GHSA-488G-HW5F-X29P
Version ranges need review.
llama-index-core
OpenShift Lightspeed/openshift-lightspeed-tech-preview/lightspeed-rag-tool-rhel9
PyPI
Red Hat
Medium
Fix reported
2026-07-07
LlamaIndex includes an exec call for `import {cls_name}`
CVE-2024-45201 · GHSA-FXC2-8M62-M85X
Version ranges need review.
llama-index-core
llama-index
PyPI
Critical
Fix reported
2026-07-01
llama-index-core Command Injection vulnerability
CVE-2024-3271 · GHSA-R6GP-RFF2-P3HF
Version ranges need review.
llama-index-core
PyPI
Critical
Fix reported
2026-07-01