{"kind": "product", "path": "vulns/pypi/llama-index", "name": "llama-index", "product": "llama-index", "ecosystem": "PyPI", "items": [{"id": "CVE-2024-14021", "noindex": false, "published": "2026-01-12T23:04:43.095Z", "modified": "2026-07-28T01:47:42.445Z", "cvss": 8.4, "cvss_vector": "CVSS:4.0/AV:L/AC:L/AT:N/PR:N/UI:A/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N", "severity": "high", "epss": 0.00337, "kev": false, "exploits": [], "stacks": [{"name": "python", "path": "vulns/stack/python", "slug": "python"}], "path": "vulns/cve-2024-14021", "title": "LlamaIndex <= 0.11.6 BGEM3Index Unsafe Deserialization", "description": "LlamaIndex (run-llama/llama_index) versions up to and including 0.11.6 contain an unsafe deserialization vulnerability in BGEM3Index.load_from_disk() in llama_index/indices/managed/bge_m3/base.py. The function uses pickle.load() to deserialize multi_embed_store.pkl from a user-supplied persist_dir without validation. An attacker who can provide a crafted persist directory containing a malicious pickle file can trigger arbitrary code execution when the victim loads the index from disk.", "references": ["https://huntr.com/bounties/ab4ceeb4-aa85-4d1c-aaca-4eda1b71fc12", "https://www.llamaindex.ai/", "https://github.com/run-llama/llama_index"], "fixes": ["0.11.7"], "products": [{"name": "llama-index", "path": "vulns/pypi/llama-index", "ecosystem": "PyPI"}]}, {"id": "CVE-2024-58339", "noindex": false, "published": "2026-01-12T23:04:25.256Z", "modified": "2026-07-28T01:47:43.838Z", "cvss": 8.7, "cvss_vector": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N", "severity": "high", "epss": 0.00649, "kev": false, "exploits": [], "stacks": [{"name": "python", "path": "vulns/stack/python", "slug": "python"}], "path": "vulns/cve-2024-58339", "title": "LlamaIndex <= 0.12.2 VannaQueryEngine SQL Execution Allows Resource Exhaustion", "description": "LlamaIndex (run-llama/llama_index) versions up to and including 0.12.2 contain an uncontrolled resource consumption vulnerability in the VannaPack VannaQueryEngine implementation. The custom_query() logic generates SQL statements from a user-supplied prompt and executes them via vn.run_sql() without enforcing query execution limits In downstream deployments where untrusted users can supply prompts, an attacker can trigger expensive or unbounded SQL operations that exhaust CPU or memory resources, resulting in a denial-of-service condition. The vulnerable execution path occurs in llama_index/packs/vanna/base.py within custom_query().", "references": ["https://huntr.com/bounties/a1d6c30d-fce0-412a-bd22-14e0d4c1fa1f", "https://www.llamaindex.ai/", "https://github.com/run-llama/llama_index"], "fixes": ["0.12.3"], "products": [{"name": "llama-index", "path": "vulns/pypi/llama-index", "ecosystem": "PyPI"}]}, {"id": "CVE-2025-7707", "noindex": false, "published": "2025-10-13T16:15:08.249Z", "modified": "2025-10-14T14:32:42.854Z", "cvss": 7.1, "cvss_vector": "CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:H", "severity": "high", "epss": 0.0019, "kev": false, "exploits": [], "stacks": [{"name": "python", "path": "vulns/stack/python", "slug": "python"}], "path": "vulns/cve-2025-7707", "title": "World-Writable NLTK Cache Directory Vulnerability in run-llama/llama_index", "description": "The llama_index library version 0.12.33 sets the NLTK data directory to a subdirectory of the codebase by default, which is world-writable in multi-user environments. This configuration allows local users to overwrite, delete, or corrupt NLTK data files, leading to potential denial of service, data tampering, or privilege escalation. The vulnerability arises from the use of a shared cache directory instead of a user-specific one, making it susceptible to local data tampering and denial of service.", "references": ["https://huntr.com/bounties/3fe2c8ab-6727-4aef-a0ef-4d2818e48803", "https://github.com/run-llama/llama_index/commit/98816394d57c7f53f847ed7b60725e69d0e7aae4", "https://nvd.nist.gov/vuln/detail/CVE-2025-7707"], "fixes": ["0.13.0"], "products": [{"name": "llama-index", "path": "vulns/pypi/llama-index", "ecosystem": "PyPI"}]}, {"id": "CVE-2025-6211", "noindex": false, "published": "2025-07-10T13:04:34.401Z", "modified": "2025-07-10T15:13:12.599Z", "cvss": 6.5, "cvss_vector": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:L", "severity": "medium", "epss": 0.00361, "kev": false, "exploits": [], "stacks": [{"name": "python", "path": "vulns/stack/python", "slug": "python"}], "path": "vulns/cve-2025-6211", "title": "MD5 Hash Collision in run-llama/llama_index", "description": "A vulnerability in the DocugamiReader class of the run-llama/llama_index repository, up to version 0.12.28, involves the use of MD5 hashing to generate IDs for document chunks. This approach leads to hash collisions when structurally distinct chunks contain identical text, resulting in one chunk overwriting another. This can cause loss of semantically or legally important document content, breakage of parent-child chunk hierarchies, and inaccurate or hallucinated responses in AI outputs. The issue is resolved in version 0.3.1.", "references": ["https://huntr.com/bounties/1a48a011-a3c5-4979-9ffc-9652280bc389", "https://github.com/run-llama/llama_index/commit/29b2e07e64ed7d302b1cc058185560b28eaa1352", "https://nvd.nist.gov/vuln/detail/CVE-2025-6211"], "fixes": ["0.12.41"], "products": [{"name": "llama-index", "path": "vulns/pypi/llama-index", "ecosystem": "PyPI"}]}, {"id": "CVE-2025-6209", "noindex": false, "published": "2025-07-07T12:21:10.767Z", "modified": "2025-07-07T13:45:55.539Z", "cvss": 7.5, "cvss_vector": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N", "severity": "high", "epss": 0.00621, "kev": false, "exploits": [], "stacks": [{"name": "python", "path": "vulns/stack/python", "slug": "python"}], "path": "vulns/cve-2025-6209", "title": "Arbitrary File Read through Path Traversal in run-llama/llama_index", "description": "A path traversal vulnerability exists in run-llama/llama_index versions 0.12.27 through 0.12.40, specifically within the `encode_image` function in `generic_utils.py`. This vulnerability allows an attacker to manipulate the `image_path` input to read arbitrary files on the server, including sensitive system files. The issue arises due to improper validation or sanitization of the file path, enabling path traversal sequences to access files outside the intended directory. The vulnerability is fixed in version 0.12.41.", "references": ["https://huntr.com/bounties/e89d14f8-bfe8-4c9a-bb2a-656c01cc9a68", "https://github.com/run-llama/llama_index/commit/cdeaab91a204d1c3527f177dac37390327aef274", "https://nvd.nist.gov/vuln/detail/CVE-2025-6209"], "fixes": ["0.12.41"], "products": [{"name": "llama-index", "path": "vulns/pypi/llama-index", "ecosystem": "PyPI"}]}, {"id": "CVE-2025-5472", "noindex": false, "published": "2025-07-07T09:55:56.730Z", "modified": "2025-07-07T11:23:35.709Z", "cvss": 6.5, "cvss_vector": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H", "severity": "medium", "epss": 0.00388, "kev": false, "exploits": [], "stacks": [{"name": "python", "path": "vulns/stack/python", "slug": "python"}], "path": "vulns/cve-2025-5472", "title": "Denial of Service via Uncontrolled Recursive JSON Parsing in JSONReader in run-llama/llama_index", "description": "The JSONReader in run-llama/llama_index versions 0.12.28 is vulnerable to a stack overflow due to uncontrolled recursive JSON parsing. This vulnerability allows attackers to trigger a Denial of Service (DoS) by submitting deeply nested JSON structures, leading to a RecursionError and crashing applications. The root cause is the unsafe recursive traversal design and lack of depth validation, which makes the JSONReader susceptible to stack overflow when processing deeply nested JSON. This impacts the availability of services, making them unreliable and disrupting workflows. The issue is resolved in version 0.12.38.", "references": ["https://huntr.com/bounties/df187bda-7911-4823-a19a-e15b2c66b0d4", "https://github.com/run-llama/llama_index/commit/c032843a02ce38fd8f284b2aa5a37fd1c17ae635", "https://nvd.nist.gov/vuln/detail/CVE-2025-5472"], "fixes": ["0.12.38"], "products": [{"name": "llama-index", "path": "vulns/pypi/llama-index", "ecosystem": "PyPI"}]}, {"id": "CVE-2025-6210", "noindex": false, "published": "2025-07-07T09:55:46.893Z", "modified": "2025-07-07T12:17:09.857Z", "cvss": 6.2, "cvss_vector": "CVSS:3.0/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N", "severity": "medium", "epss": 0.00334, "kev": false, "exploits": [], "stacks": [{"name": "python", "path": "vulns/stack/python", "slug": "python"}], "path": "vulns/cve-2025-6210", "title": "Hardlink-Based Path Traversal in run-llama/llama_index", "description": "A vulnerability in the ObsidianReader class of the run-llama/llama_index repository, specifically in version 0.12.27, allows for hardlink-based path traversal. This flaw permits attackers to bypass path restrictions and access sensitive system files, such as /etc/passwd, by exploiting hardlinks. The vulnerability arises from inadequate handling of hardlinks in the load_data() method, where the security checks fail to differentiate between real files and hardlinks. This issue is resolved in version 0.5.2.", "references": ["https://huntr.com/bounties/a654b322-a509-4448-a1f5-0f22850b4687", "https://github.com/run-llama/llama_index/commit/a86c96ae0e662492eeb471b658ae849a93f628ff", "https://nvd.nist.gov/vuln/detail/CVE-2025-6210"], "fixes": ["0.5.2"], "products": [{"name": "llama-index", "path": "vulns/pypi/llama-index", "ecosystem": "PyPI"}]}, {"id": "CVE-2025-3046", "noindex": false, "published": "2025-07-07T09:54:50.409Z", "modified": "2025-07-07T14:00:59.560Z", "cvss": 7.5, "cvss_vector": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N", "severity": "high", "epss": 0.00637, "kev": false, "exploits": [], "stacks": [{"name": "python", "path": "vulns/stack/python", "slug": "python"}], "path": "vulns/cve-2025-3046", "title": "Path Traversal via Symbolic Links in run-llama/llama_index", "description": "A vulnerability in the `ObsidianReader` class of the run-llama/llama_index repository, versions 0.12.23 to 0.12.28, allows for arbitrary file read through symbolic links. The `ObsidianReader` fails to resolve symlinks to their real paths and does not validate whether the resolved paths lie within the intended directory. This flaw enables attackers to place symlinks pointing to files outside the vault directory, which are then processed as valid Markdown files, potentially exposing sensitive information.", "references": ["https://huntr.com/bounties/90a1f1b2-bb82-4d66-9fc1-856ed5f904da", "https://github.com/run-llama/llama_index/commit/0008041e8dde8e519621388e5d6f558bde6ef42e", "https://nvd.nist.gov/vuln/detail/CVE-2025-3046"], "fixes": ["0.12.28"], "products": [{"name": "llama-index", "path": "vulns/pypi/llama-index", "ecosystem": "PyPI"}]}, {"id": "CVE-2025-3044", "noindex": false, "published": "2025-07-07T09:54:22.506Z", "modified": "2025-07-07T15:23:18.518Z", "cvss": 5.3, "cvss_vector": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N", "severity": "medium", "epss": 0.00323, "kev": false, "exploits": [], "stacks": [{"name": "python", "path": "vulns/stack/python", "slug": "python"}], "path": "vulns/cve-2025-3044", "title": "MD5 Hash Collision in run-llama/llama_index", "description": "A vulnerability in the ArxivReader class of the run-llama/llama_index repository, versions up to v0.12.22.post1, allows for MD5 hash collisions when generating filenames for downloaded papers. This can lead to data loss as papers with identical titles but different contents may overwrite each other, preventing some papers from being processed for AI model training. The issue is resolved in version 0.12.28.", "references": ["https://huntr.com/bounties/80182c3a-876f-422f-8bac-38267e0345d6", "https://github.com/run-llama/llama_index/commit/0008041e8dde8e519621388e5d6f558bde6ef42e", "https://nvd.nist.gov/vuln/detail/CVE-2025-3044"], "fixes": ["0.12.28"], "products": [{"name": "llama-index", "path": "vulns/pypi/llama-index", "ecosystem": "PyPI"}]}, {"id": "CVE-2025-3225", "noindex": false, "published": "2025-07-07T09:54:06.033Z", "modified": "2025-07-07T14:59:26.842Z", "cvss": 7.5, "cvss_vector": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H", "severity": "high", "epss": 0.00478, "kev": false, "exploits": [], "stacks": [{"name": "python", "path": "vulns/stack/python", "slug": "python"}], "path": "vulns/cve-2025-3225", "title": "XML Entity Expansion vulnerability in run-llama/llama_index", "description": "An XML Entity Expansion vulnerability, also known as a 'billion laughs' attack, exists in the sitemap parser of the run-llama/llama_index repository, specifically affecting version v0.12.21. This vulnerability allows an attacker to supply a malicious Sitemap XML, leading to a Denial of Service (DoS) by exhausting system memory and potentially causing a system crash. The issue is resolved in version v0.12.29.", "references": ["https://huntr.com/bounties/e33c0699-e9a2-49aa-837b-5363205637a2", "https://github.com/run-llama/llama_index/commit/4f6ee062b19212106a2632af9c9521fc7f0a3584", "https://nvd.nist.gov/vuln/detail/CVE-2025-3225"], "fixes": ["0.12.29"], "products": [{"name": "llama-index", "path": "vulns/pypi/llama-index", "ecosystem": "PyPI"}]}, {"id": "CVE-2025-3108", "noindex": false, "published": "2025-07-06T22:47:25.655Z", "modified": "2025-07-07T13:43:12.649Z", "cvss": 5, "cvss_vector": "CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:L/A:L", "severity": "medium", "epss": 0.005, "kev": false, "exploits": [], "stacks": [{"name": "python", "path": "vulns/stack/python", "slug": "python"}], "path": "vulns/cve-2025-3108", "title": "Unsafe Deserialization in JsonPickleSerializer Enables Remote Code Execution in run-llama/llama_index", "description": "A critical deserialization vulnerability exists in the run-llama/llama_index library's JsonPickleSerializer component, affecting versions v0.12.27 through v0.12.40. This vulnerability allows remote code execution due to an insecure fallback to Python's pickle module. JsonPickleSerializer prioritizes deserialization using pickle.loads(), which can execute arbitrary code when processing untrusted data. Attackers can exploit this by crafting malicious payloads to achieve full system compromise. The root cause includes an insecure fallback mechanism, lack of validation or safeguards, misleading design, and violation of Python security guidelines.", "references": ["https://huntr.com/bounties/9b55a5e8-74e6-4241-b323-e360dc8b110a", "https://github.com/run-llama/llama_index/commit/702e4340623092fac4cf2fe95eb9465034856da3", "https://nvd.nist.gov/vuln/detail/CVE-2025-3108"], "fixes": ["0.12.41"], "products": [{"name": "llama-index", "path": "vulns/pypi/llama-index", "ecosystem": "PyPI"}]}, {"id": "CVE-2025-1793", "noindex": false, "published": "2025-06-05T04:54:47.071Z", "modified": "2025-06-05T14:08:26.589Z", "cvss": 9.8, "cvss_vector": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", "severity": "critical", "epss": 0.00691, "kev": false, "exploits": [], "stacks": [{"name": "python", "path": "vulns/stack/python", "slug": "python"}], "path": "vulns/cve-2025-1793", "title": "SQL Injection in run-llama/llama_index", "description": "Multiple vector store integrations in run-llama/llama_index version v0.12.21 have SQL injection vulnerabilities. These vulnerabilities allow an attacker to read and write data using SQL, potentially leading to unauthorized access to data of other users depending on the usage of the llama-index library in a web application.", "references": ["https://huntr.com/bounties/8cb1555a-9655-4122-b0d6-60059e79183c", "https://github.com/run-llama/llama_index/commit/0008041e8dde8e519621388e5d6f558bde6ef42e", "https://nvd.nist.gov/vuln/detail/CVE-2025-1793"], "fixes": ["0.12.28"], "products": [{"name": "llama-index", "path": "vulns/pypi/llama-index", "ecosystem": "PyPI"}]}, {"id": "CVE-2025-1750", "noindex": false, "published": "2025-06-02T10:04:50.526Z", "modified": "2025-06-02T12:18:24.429Z", "cvss": 9.8, "cvss_vector": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", "severity": "critical", "epss": 0.00877, "kev": false, "exploits": [], "stacks": [{"name": "python", "path": "vulns/stack/python", "slug": "python"}], "path": "vulns/cve-2025-1750", "title": "SQL Injection in run-llama/llama_index", "description": "An SQL injection vulnerability exists in the delete function of DuckDBVectorStore in run-llama/llama_index version v0.12.19. This vulnerability allows an attacker to manipulate the ref_doc_id parameter, enabling them to read and write arbitrary files on the server, potentially leading to remote code execution (RCE).", "references": ["https://huntr.com/bounties/e1302233-9180-4269-9047-1526247d2cd8", "https://github.com/run-llama/llama_index/commit/369a2942df2efcf6b74461c45d20a0af1fbe4ae2", "https://nvd.nist.gov/vuln/detail/CVE-2025-1750"], "fixes": ["0.12.21"], "products": [{"name": "llama-index", "path": "vulns/pypi/llama-index", "ecosystem": "PyPI"}]}, {"id": "CVE-2025-1753", "noindex": false, "published": "2025-05-28T09:34:10.993Z", "modified": "2025-05-28T13:25:50.026Z", "cvss": 7.8, "cvss_vector": "CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H", "severity": "high", "epss": 0.01142, "kev": false, "exploits": [], "stacks": [{"name": "python", "path": "vulns/stack/python", "slug": "python"}], "path": "vulns/cve-2025-1753", "title": "Command Injection in LLama-Index CLI in run-llama/llama_index", "description": "LLama-Index CLI version v0.12.20 contains an OS command injection vulnerability. The vulnerability arises from the improper handling of the `--files` argument, which is directly passed into `os.system`. An attacker who controls the content of this argument can inject and execute arbitrary shell commands. This vulnerability can be exploited locally if the attacker has control over the CLI arguments, and remotely if a web application calls the LLama-Index CLI with a user-controlled filename. This issue can lead to arbitrary code execution on the affected system.", "references": ["https://huntr.com/bounties/19e1c67e-1d77-451d-b10b-acbe99900b22", "https://github.com/run-llama/llama_index/commit/b57e76738c53ca82d88658b82f2d82d1c7839c7d", "https://nvd.nist.gov/vuln/detail/CVE-2025-1753"], "fixes": [], "products": [{"name": "llama-index", "path": "vulns/pypi/llama-index", "ecosystem": "PyPI"}]}, {"id": "CVE-2025-1752", "noindex": false, "published": "2025-05-10T13:21:30.866Z", "modified": "2025-10-15T12:50:06.038Z", "cvss": 7.5, "cvss_vector": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H", "severity": "high", "epss": 0.00521, "kev": false, "exploits": [], "stacks": [{"name": "python", "path": "vulns/stack/python", "slug": "python"}], "path": "vulns/cve-2025-1752", "title": "Denial of Service in run-llama/llama_index", "description": "A Denial of Service (DoS) vulnerability has been identified in the KnowledgeBaseWebReader class of the run-llama/llama_index project, affecting version ~ latest(v0.12.15). The vulnerability arises due to inappropriate secure coding measures, specifically the lack of proper implementation of the max_depth parameter in the get_article_urls function. This allows an attacker to exhaust Python's recursion limit through repeated function calls, leading to resource consumption and ultimately crashing the Python process.", "references": ["https://huntr.com/bounties/cd7b9082-7d75-42e4-84f5-dbee23cbc467", "https://github.com/run-llama/llama_index/commit/3c65db2947271de3bd1927dc66a044da385de4da", "https://nvd.nist.gov/vuln/detail/CVE-2025-1752"], "fixes": ["0.12.21"], "products": [{"name": "llama-index", "path": "vulns/pypi/llama-index", "ecosystem": "PyPI"}]}, {"id": "CVE-2024-12911", "noindex": false, "published": "2025-03-20T10:09:44.583Z", "modified": "2025-10-15T12:50:19.844Z", "cvss": 7.1, "cvss_vector": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:H", "severity": "high", "epss": 0.00522, "kev": false, "exploits": [], "stacks": [{"name": "python", "path": "vulns/stack/python", "slug": "python"}], "path": "vulns/cve-2024-12911", "title": "SQL Injection in run-llama/llama_index", "description": "A vulnerability in the `default_jsonalyzer` function of the `JSONalyzeQueryEngine` in the run-llama/llama_index repository allows for SQL injection via prompt injection. This can lead to arbitrary file creation and Denial-of-Service (DoS) attacks. The vulnerability affects the latest version and is fixed in version 0.5.1.", "references": ["https://huntr.com/bounties/095f9e67-311d-494c-99c5-5e61a0adb8f3", "https://github.com/run-llama/llama_index/commit/bf282074e20e7dafd5e2066137dcd4cd17c3fb9e", "https://nvd.nist.gov/vuln/detail/CVE-2024-12911"], "fixes": ["0.12.3"], "products": [{"name": "llama-index", "path": "vulns/pypi/llama-index", "ecosystem": "PyPI"}]}, {"id": "CVE-2024-12910", "noindex": false, "published": "2025-03-20T10:09:12.416Z", "modified": "2025-10-15T12:50:19.185Z", "cvss": 4.2, "cvss_vector": "CVSS:3.0/AV:P/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H", "severity": "medium", "epss": 0.00699, "kev": false, "exploits": [], "stacks": [{"name": "python", "path": "vulns/stack/python", "slug": "python"}], "path": "vulns/cve-2024-12910", "title": "Denial of Service in run-llama/llama_index", "description": "A vulnerability in the `KnowledgeBaseWebReader` class of the run-llama/llama_index repository, version latest, allows an attacker to cause a Denial of Service (DoS) by controlling a URL variable to contain the root URL. This leads to infinite recursive calls to the `get_article_urls` method, exhausting system resources and potentially crashing the application.", "references": ["https://huntr.com/bounties/27883f22-35ff-49df-aaa5-05031c7d6ad8", "https://github.com/run-llama/llama_index/commit/159ce485a1168100bb219dc1b93133f1121579d9", "https://nvd.nist.gov/vuln/detail/CVE-2024-12910"], "fixes": ["0.12.9"], "products": [{"name": "llama-index", "path": "vulns/pypi/llama-index", "ecosystem": "PyPI"}, {"name": "llama-index", "path": "vulns/pypi/llama-index", "ecosystem": "PyPI"}]}, {"id": "CVE-2024-12704", "noindex": false, "published": "2025-03-20T10:09:06.689Z", "modified": "2025-10-15T12:50:18.666Z", "cvss": 7.5, "cvss_vector": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H", "severity": "high", "epss": 0.00831, "kev": false, "exploits": [], "stacks": [{"name": "python", "path": "vulns/stack/python", "slug": "python"}], "path": "vulns/cve-2024-12704", "title": "Denial of Service (DoS) in run-llama/llama_index", "description": "A vulnerability in the LangChainLLM class of the run-llama/llama_index repository, version v0.12.5, allows for a Denial of Service (DoS) attack. The stream_complete method executes the llm using a thread and retrieves the result via the get_response_gen method of the StreamingGeneratorCallbackHandler class. If the thread terminates abnormally before the _llm.predict is executed, there is no exception handling for this case, leading to an infinite loop in the get_response_gen function. This can be triggered by providing an input of an incorrect type, causing the thread to terminate and the process to continue running indefinitely.", "references": ["https://huntr.com/bounties/a0b638fd-21c6-4ba7-b381-6ab98472a02a", "https://github.com/run-llama/llama_index/commit/d1ecfb77578d089cbe66728f18f635c09aa32a05", "https://nvd.nist.gov/vuln/detail/CVE-2024-12704"], "fixes": [], "products": [{"name": "llama-index", "path": "vulns/pypi/llama-index", "ecosystem": "PyPI"}]}, {"id": "CVE-2024-45201", "noindex": false, "published": "2024-08-22T00:00:00.000Z", "modified": "2024-11-25T18:19:38.593Z", "cvss": 8.8, "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H", "severity": "high", "epss": 0.00533, "kev": false, "exploits": [], "stacks": [{"name": "python", "path": "vulns/stack/python", "slug": "python"}], "path": "vulns/cve-2024-45201", "title": "CVE-2024-45201", "description": "An issue was discovered in llama_index before 0.10.38. download/integration.py includes an exec call for import {cls_name}.", "references": ["https://github.com/run-llama/llama_index/pull/13523", "https://github.com/run-llama/llama_index/compare/v0.10.37...v0.10.38", "https://nvd.nist.gov/vuln/detail/CVE-2024-45201"], "fixes": ["0.10.38"], "products": [{"name": "llama-index", "path": "vulns/pypi/llama-index", "ecosystem": "PyPI"}]}, {"id": "CVE-2024-4181", "noindex": false, "published": "2024-05-16T09:03:47.278Z", "modified": "2024-08-01T20:33:52.659Z", "cvss": 8.8, "cvss_vector": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H", "severity": "high", "epss": 0.02135, "kev": false, "exploits": [], "stacks": [{"name": "python", "path": "vulns/stack/python", "slug": "python"}], "path": "vulns/cve-2024-4181", "title": "Command Injection in run-llama/llama_index", "description": "A command injection vulnerability exists in the RunGptLLM class of the llama_index library, version 0.9.47, used by the RunGpt framework from JinaAI to connect to Language Learning Models (LLMs). The vulnerability arises from the improper use of the eval function, allowing a malicious or compromised LLM hosting provider to execute arbitrary commands on the client's machine. This issue was fixed in version 0.10.13. The exploitation of this vulnerability could lead to a hosting provider gaining full control over client machines.", "references": ["https://huntr.com/bounties/1a204520-598a-434e-b13d-0d34f2a5ddc1", "https://github.com/run-llama/llama_index/commit/d73715eaf0642705583e7897c78b9c8dd2d3a7ba", "https://nvd.nist.gov/vuln/detail/CVE-2024-4181"], "fixes": ["0.10.13"], "products": [{"name": "llama-index", "path": "vulns/pypi/llama-index", "ecosystem": "PyPI"}, {"name": "llama-index", "path": "vulns/pypi/llama-index", "ecosystem": "PyPI"}]}], "total": 22, "unknown_count": 0, "release_unconfirmed": false, "page": 1, "pages": 2, "filtered": false, "noindex": false, "filters": {}, "page_size": 20, "products": [{"name": "llama-index", "path": "vulns/pypi/llama-index", "ecosystem": "PyPI"}], "stacks": [{"name": "system", "path": "vulns/stack/system", "slug": "system"}, {"name": "web", "path": "vulns/stack/web", "slug": "web"}, {"name": "php", "path": "vulns/stack/php", "slug": "php"}, {"name": "python", "path": "vulns/stack/python", "slug": "python"}, {"name": "node", "path": "vulns/stack/node", "slug": "node"}, {"name": "database", "path": "vulns/stack/database", "slug": "database"}, {"name": "containers", "path": "vulns/stack/containers", "slug": "containers"}, {"name": "network", "path": "vulns/stack/network", "slug": "network"}, {"name": "applications", "path": "vulns/stack/applications", "slug": "applications"}], "versions": [], "stats": {"recent": 0, "kev": 0}, "lastmod": "2026-07-28T01:47:43.838Z", "early_advisories": [], "license": "Sie dürfen die Auswahl von PatchFirst und unsere Ergänzungen (Prioritäten, Frühwarnungen, Texte, Zusammenfassungen und Aggregate) für eigene Zwecke einschließlich interner geschäftlicher Aufgaben frei nutzen. Weiterverkauf, kommerzielle Verbreitung und massenhafte Spiegelung dieser Auswahl oder Ergänzungen erfordern eine schriftliche Vereinbarung mit dem Betreiber. Nennen Sie bei jeder Nutzung oder Veröffentlichung der Auswahl oder unserer Ergänzungen PatchFirst (https://patchfirst.dev/vulns/) mit diesem Link zur Feedseite Ihrer Region als Quelle. Originaleinträge aus offenen Quellen unterliegen weiterhin ihren jeweiligen Lizenzen und Bedingungen. Diese Bedingungen beschränken Ihre Rechte an den Originaldaten nicht, die Sie direkt bei den Quellen beziehen können.", "terms_url": "https://patchfirst.dev/de/vulns/#feed-terms", "attribution": {"name": "PatchFirst", "url": "https://patchfirst.dev/vulns/"}, "source_changes": "PatchFirst wählt Einträge aus, normalisiert und kombiniert sie; Zusammenfassungen und Übersetzungen können hinzukommen. Nachrichten werden im jeweiligen Eintrag mit einem Link zur Originalquelle belegt.", "sources": [{"id": "cve", "name": "CVE List / CVE.org", "url": "https://www.cve.org/", "license": "CVE Terms of Use", "terms_url": "https://www.cve.org/Legal/TermsOfUse", "notice": "Copyright © 1999–2021, The MITRE Corporation. LICENSE Submissions : For all materials you submit to the Common Vulnerabilities and Exposures (CVE™), you hereby grant to The MITRE Corporation (MITRE) and all CVE Numbering Authorities (CNAs) a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute such materials and derivative works. Unless required by applicable law or agreed to in writing, you provide such materials on an \"AS IS\" BASIS, WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied, including, without limitation, any warranties or conditions of TITLE, NON-INFRINGEMENT, MERCHANTABILITY, or FITNESS FOR A PARTICULAR PURPOSE. CVE Usage : MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE™). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy. DISCLAIMERS ALL DOCUMENTS AND THE INFORMATION CONTAINED THEREIN PROVIDED BY MITRE ARE PROVIDED ON AN \"AS IS\" BASIS AND THE CONTRIBUTOR, THE ORGANIZATION HE/SHE REPRESENTS OR IS SPONSORED BY (IF ANY), THE MITRE CORPORATION, ITS BOARD OF TRUSTEES, OFFICERS, AGENTS, AND EMPLOYEES, DISCLAIM ALL WARRANTIES, EXPRESS OR IMPLIED, INCLUDING BUT NOT LIMITED TO ANY WARRANTY THAT THE USE OF THE INFORMATION THEREIN WILL NOT INFRINGE ANY RIGHTS OR ANY IMPLIED WARRANTIES OF MERCHANTABILITY OR FITNESS FOR A PARTICULAR PURPOSE."}, {"id": "osv", "name": "OSV", "url": "https://osv.dev/", "terms_url": "https://google.github.io/osv.dev/data/", "terms": "Die Lizenzen der Ursprungsdatenbanken unterscheiden sich; siehe Quellenkatalog."}, {"id": "kev", "name": "CISA KEV", "url": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog", "license": "CC0-1.0", "terms_url": "https://github.com/cisagov/kev-data/blob/develop/LICENSE"}, {"id": "epss", "name": "FIRST EPSS", "url": "https://www.first.org/epss/", "terms_url": "https://www.first.org/epss/faq", "terms": "Frei zugängliche Bewertungen; Quellenangabe erbeten (FIRST EPSS, Bewertungen von Empirical Security)."}, {"id": "github-advisory", "name": "GitHub Advisory Database", "url": "https://github.com/advisories", "license": "CC-BY-4.0", "terms_url": "https://github.com/github/advisory-database/blob/main/LICENSE.md"}, {"id": "exploitdb", "name": "Exploit-DB", "url": "https://www.exploit-db.com/", "license": "GPL-2.0", "terms_url": "https://gitlab.com/exploit-database/exploitdb/-/blob/main/LICENSE.md"}, {"id": "metasploit", "name": "Metasploit", "url": "https://github.com/rapid7/metasploit-framework", "license": "BSD-3-Clause", "terms_url": "https://github.com/rapid7/metasploit-framework/blob/master/LICENSE", "notice": "Copyright (c) 2006-2026, Rapid7, Inc.\nLicense: BSD-3-clause\n Redistribution and use in source and binary forms, with or without modification,\n are permitted provided that the following conditions are met:\n .\n * Redistributions of source code must retain the above copyright notice,\n this list of conditions and the following disclaimer.\n .\n * Redistributions in binary form must reproduce the above copyright notice,\n this list of conditions and the following disclaimer in the documentation\n and/or other materials provided with the distribution.\n .\n * Neither the name of Rapid7, Inc. nor the names of its contributors\n may be used to endorse or promote products derived from this software\n without specific prior written permission.\n .\n THIS SOFTWARE IS PROVIDED BY THE COPYRIGHT HOLDERS AND CONTRIBUTORS \"AS IS\" AND\n ANY EXPRESS OR IMPLIED WARRANTIES, INCLUDING, BUT NOT LIMITED TO, THE IMPLIED\n WARRANTIES OF MERCHANTABILITY AND FITNESS FOR A PARTICULAR PURPOSE ARE\n DISCLAIMED. IN NO EVENT SHALL THE COPYRIGHT OWNER OR CONTRIBUTORS BE LIABLE FOR\n ANY DIRECT, INDIRECT, INCIDENTAL, SPECIAL, EXEMPLARY, OR CONSEQUENTIAL DAMAGES\n (INCLUDING, BUT NOT LIMITED TO, PROCUREMENT OF SUBSTITUTE GOODS OR SERVICES;\n LOSS OF USE, DATA, OR PROFITS; OR BUSINESS INTERRUPTION) HOWEVER CAUSED AND ON\n ANY THEORY OF LIABILITY, WHETHER IN CONTRACT, STRICT LIABILITY, OR TORT\n (INCLUDING NEGLIGENCE OR OTHERWISE) ARISING IN ANY WAY OUT OF THE USE OF THIS\n SOFTWARE, EVEN IF ADVISED OF THE POSSIBILITY OF SUCH DAMAGE."}, {"id": "nuclei", "name": "Nuclei Templates", "url": "https://github.com/projectdiscovery/nuclei-templates", "license": "MIT", "terms_url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/LICENSE.md", "notice": "MIT License\n\nCopyright (c) 2025 ProjectDiscovery, Inc.\n\nPermission is hereby granted, free of charge, to any person obtaining a copy\nof this software and associated documentation files (the \"Software\"), to deal\nin the Software without restriction, including without limitation the rights\nto use, copy, modify, merge, publish, distribute, sublicense, and/or sell\ncopies of the Software, and to permit persons to whom the Software is\nfurnished to do so, subject to the following conditions:\n\nThe above copyright notice and this permission notice shall be included in all\ncopies or substantial portions of the Software.\n\nTHE SOFTWARE IS PROVIDED \"AS IS\", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR\nIMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY,\nFITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE\nAUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER\nLIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM,\nOUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE\nSOFTWARE."}, {"id": "linux-kernel", "name": "Linux kernel releases", "url": "https://www.kernel.org/", "license": "CC-BY-SA-4.0", "terms_url": "https://www.kernel.org/legal.html", "notice": "Copyright (C) 1997-2014 by The Linux Kernel Organization, Inc."}]}