Security
فارسی
All products

llama-index

PyPI · Package
22 reports
Vulnerability alerts
Follow
ReportProductEcosystemSeverityFix statusLast updated
LlamaIndex DuckDBVectorStore vulnerable to SQL injection through ref_doc_idCVE-2025-1750 · GHSA-6MCC-Q3MG-3QG6Version ranges need review. llama-index-vector-stores-duckdbllama-index PyPI Critical Fix reported
LlamaIndex vulnerable to data loss through hash collisions in its DocugamiReader class CVE-2025-6211 · GHSA-5HQ9-5R78-2GJHVersion ranges need review. llama-index-readers-docugamillama-index PyPIRed Hat Medium Fix reported
llama_index vulnerable to SQL InjectionCVE-2025-1793 · GHSA-V3C8-3PR6-GR7PVersion ranges need review. llama-index PyPI Critical Fix reported
LLama-Index CLI OS command injection vulnerabilityCVE-2025-1753 · GHSA-G99H-56MW-8263Version ranges need review. llama-index-clillama-index PyPIRed Hat High Fix reported
LlamaIndex Improper Handling of Exceptional Conditions vulnerabilityCVE-2024-12704 · GHSA-J3WR-M6XH-64HGVersion ranges need review. llama-index-corellama-index PyPIRed Hat High Fix reported
LlamaIndex vulnerable to DoS attack through uncontrolled recursive JSON parsingCVE-2025-5472 · GHSA-3WXX-Q3GV-PVVVVersion ranges need review. llama-index-corellama-index PyPIRed Hat Medium Fix reported
LlamaIndex has Incomplete Documentation of Program Execution related to JsonPickleSerializer componentCVE-2025-3108 · GHSA-M84C-4C34-28GFVersion ranges need review. llama-index-corellama-index PyPI Medium Fix reported
LlamaIndex has an XML Entity Expansion vulnerability in its sitemap parserCVE-2025-3225 · GHSA-W42R-MRX7-C633Version ranges need review. llama-index-readers-papersllama-index PyPIRed Hat High Fix reported
LlamaIndex vulnerability in its ObsidianReader class can lead to Path Traversal exploitCVE-2025-6210 · GHSA-3J8R-JF9W-5CMHVersion ranges need review. llama-index-readers-obsidianllama-index PyPI Medium Fix reported
LlamaIndex vulnerability in ArxivReader class can cause MD5 hash collisionsCVE-2025-3044 · GHSA-P7J4-JWJF-5X9WVersion ranges need review. llama-index-readers-papersllama-index PyPI Medium Fix reported
LlamaIndex is vulnerable to Path Traversal attack through its ObsidianReader classCVE-2025-3046 · GHSA-FMRF-6JV9-QJC7Version ranges need review. llama-index-readers-obsidianllama-index PyPIRed Hat High Fix reported
RunGptLLM class in LlamaIndex has a command injectionCVE-2024-4181 · GHSA-PW38-XV9X-H8CHVersion ranges need review. llama-index-llms-rungptllama-index PyPI High Fix reported
LlamaIndex vulnerable to Creation of Temporary File in Directory with Insecure PermissionsCVE-2024-12911 · GHSA-JMGM-GX32-VP4WVersion ranges need review. llama-indexOpenShift Lightspeed/openshift-lightspeed-tech-preview/lightspeed-service-api-rhel9 PyPIRed Hat High Fix reported
LlamaIndex Vulnerable to Denial of Service (DoS)CVE-2025-1752 · GHSA-7C85-87CP-MR6GVersion ranges need review. llama-index PyPI High Fix reported
LlamaIndex vulnerable to Path Traversal attack through its encode_image functionCVE-2025-6209 · GHSA-2RHQ-96Q8-4VJQVersion ranges need review. llama-index-corellama-index PyPIRed Hat High Fix reported
llama-index has Insecure Temporary FileCVE-2025-7707 · GHSA-RG9H-VX28-XXP5Version ranges need review. llama-index PyPI High Fix reported
LlamaIndex includes an exec call for `import {cls_name}`CVE-2024-45201 · GHSA-FXC2-8M62-M85XVersion ranges need review. llama-index-corellama-index PyPI Critical Fix reported
SQL injection in llama-indexCVE-2024-23751 · GHSA-2JXW-4HM4-6W87Version ranges need review. llama-index PyPI Critical Fix reported
llama-index vulnerable to arbitrary code executionCVE-2023-39662 · GHSA-2XXC-73FV-36F7Version ranges need review. llama-index PyPI Critical Fix reported
LlamaIndex Uncontrolled Resource Consumption vulnerabilityCVE-2024-12910 · GHSA-JVPF-XF32-2W4QVersion ranges need review. llama-indexOpenShift Lightspeed/openshift-lightspeed-tech-preview/lightspeed-service-api-rhel9 PyPIRed Hat Medium Fix reported