| Affected_by_vulnerabilities |
| 0 |
| url |
VCID-9gy4-wsap-kqde |
| vulnerability_id |
VCID-9gy4-wsap-kqde |
| summary |
The `SimpleDirectoryReader` component in `llama_index.core` version 0.12.23 suffers from uncontrolled memory consumption due to a resource management flaw. The vulnerability arises because the user-specified file limit (`num_files_limit`) is applied after all files in a directory are loaded into memory. This can lead to memory exhaustion and degraded performance, particularly in environments with limited resources. The issue is resolved in version 0.12.41. |
| references |
|
| fixed_packages |
|
| aliases |
CVE-2025-6208, GHSA-488g-hw5f-x29p
|
| risk_score |
3.1 |
| exploitability |
0.5 |
| weighted_severity |
6.2 |
| resource_url |
http://public2.vulnerablecode.io/vulnerabilities/VCID-9gy4-wsap-kqde |
|
| 1 |
| url |
VCID-cnth-gsay-gbcw |
| vulnerability_id |
VCID-cnth-gsay-gbcw |
| summary |
A denial of service vulnerability exists in the JSONReader component of the run-llama/llama_index repository, specifically in version v0.12.37. The vulnerability is caused by uncontrolled recursion when parsing deeply nested JSON files, which can lead to Python hitting its maximum recursion depth limit. This results in high resource consumption and potential crashes of the Python process. The issue is resolved in version 0.12.38. |
| references |
|
| fixed_packages |
|
| aliases |
CVE-2025-5302, GHSA-7753-xrfw-ch36
|
| risk_score |
4.0 |
| exploitability |
0.5 |
| weighted_severity |
8.0 |
| resource_url |
http://public2.vulnerablecode.io/vulnerabilities/VCID-cnth-gsay-gbcw |
|
| 2 |
| url |
VCID-jg6s-2mm7-aud1 |
| vulnerability_id |
VCID-jg6s-2mm7-aud1 |
| summary |
A command injection vulnerability exists in the run-llama/llama_index repository, specifically within the safe_eval function. Attackers can bypass the intended security mechanism, which checks for the presence of underscores in code generated by LLM, to execute arbitrary code. This is achieved by crafting input that does not contain an underscore but still results in the execution of OS commands. The vulnerability allows for remote code execution (RCE) on the server hosting the application. |
| references |
|
| fixed_packages |
|
| aliases |
CVE-2024-3271, GHSA-r6gp-rff2-p3hf
|
| risk_score |
4.5 |
| exploitability |
0.5 |
| weighted_severity |
9.0 |
| resource_url |
http://public2.vulnerablecode.io/vulnerabilities/VCID-jg6s-2mm7-aud1 |
|
| 3 |
| url |
VCID-kef8-9x8x-7qbf |
| vulnerability_id |
VCID-kef8-9x8x-7qbf |
| summary |
A vulnerability in the LangChainLLM class of the run-llama/llama_index repository, version v0.12.5, allows for a Denial of Service (DoS) attack. The stream_complete method executes the llm using a thread and retrieves the result via the get_response_gen method of the StreamingGeneratorCallbackHandler class. If the thread terminates abnormally before the _llm.predict is executed, there is no exception handling for this case, leading to an infinite loop in the get_response_gen function. This can be triggered by providing an input of an incorrect type, causing the thread to terminate and the process to continue running indefinitely. |
| references |
|
| fixed_packages |
|
| aliases |
CVE-2024-12704, GHSA-j3wr-m6xh-64hg
|
| risk_score |
4.0 |
| exploitability |
0.5 |
| weighted_severity |
8.0 |
| resource_url |
http://public2.vulnerablecode.io/vulnerabilities/VCID-kef8-9x8x-7qbf |
|
| 4 |
| url |
VCID-m26d-a2k7-6uck |
| vulnerability_id |
VCID-m26d-a2k7-6uck |
| summary |
The JSONReader in run-llama/llama_index versions 0.12.28 is vulnerable to a stack overflow due to uncontrolled recursive JSON parsing. This vulnerability allows attackers to trigger a Denial of Service (DoS) by submitting deeply nested JSON structures, leading to a RecursionError and crashing applications. The root cause is the unsafe recursive traversal design and lack of depth validation, which makes the JSONReader susceptible to stack overflow when processing deeply nested JSON. This impacts the availability of services, making them unreliable and disrupting workflows. The issue is resolved in version 0.12.38. |
| references |
|
| fixed_packages |
|
| aliases |
CVE-2025-5472, GHSA-3wxx-q3gv-pvvv
|
| risk_score |
3.1 |
| exploitability |
0.5 |
| weighted_severity |
6.2 |
| resource_url |
http://public2.vulnerablecode.io/vulnerabilities/VCID-m26d-a2k7-6uck |
|
| 5 |
| url |
VCID-mbxp-d7t1-3uaa |
| vulnerability_id |
VCID-mbxp-d7t1-3uaa |
| summary |
The llama-index-core package, up to version 0.12.44, contains a vulnerability in the `get_cache_dir()` function where a predictable, hardcoded directory path `/tmp/llama_index` is used on Linux systems without proper security controls. This vulnerability allows attackers on multi-user systems to steal proprietary models, poison cached embeddings, or conduct symlink attacks. The issue affects all Linux deployments where multiple users share the same system. The vulnerability is classified under CWE-379, CWE-377, and CWE-367, indicating insecure temporary file creation and potential race conditions. |
| references |
|
| fixed_packages |
|
| aliases |
CVE-2025-7647, GHSA-cr7q-2w66-hjcm
|
| risk_score |
4.0 |
| exploitability |
0.5 |
| weighted_severity |
8.0 |
| resource_url |
http://public2.vulnerablecode.io/vulnerabilities/VCID-mbxp-d7t1-3uaa |
|
| 6 |
| url |
VCID-pnre-tvr7-gbgm |
| vulnerability_id |
VCID-pnre-tvr7-gbgm |
| summary |
A vulnerability was identified in the `exec_utils` class of the `llama_index` package, specifically within the `safe_eval` function, allowing for prompt injection leading to arbitrary code execution. This issue arises due to insufficient validation of input, which can be exploited to bypass method restrictions and execute unauthorized code. The vulnerability is a bypass of the previously addressed CVE-2023-39662, demonstrated through a proof of concept that creates a file on the system by exploiting the flaw. |
| references |
|
| fixed_packages |
|
| aliases |
CVE-2024-3098, GHSA-wvpx-g427-q9wc
|
| risk_score |
4.5 |
| exploitability |
0.5 |
| weighted_severity |
9.0 |
| resource_url |
http://public2.vulnerablecode.io/vulnerabilities/VCID-pnre-tvr7-gbgm |
|
| 7 |
| url |
VCID-z131-hxnn-nyax |
| vulnerability_id |
VCID-z131-hxnn-nyax |
| summary |
An issue was discovered in llama_index before 0.10.38. download/integration.py includes an exec call for import {cls_name}. |
| references |
| 0 |
|
| 1 |
|
| 2 |
|
| 3 |
|
| 4 |
| reference_url |
https://github.com/run-llama/llama_index/pull/13523 |
| reference_id |
13523 |
| reference_type |
|
| scores |
| 0 |
| value |
8.8 |
| scoring_system |
cvssv3.1 |
| scoring_elements |
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H |
|
| 1 |
| value |
9.8 |
| scoring_system |
cvssv3.1 |
| scoring_elements |
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H |
|
| 2 |
| value |
9.3 |
| scoring_system |
cvssv4 |
| scoring_elements |
CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N |
|
| 3 |
| value |
CRITICAL |
| scoring_system |
generic_textual |
| scoring_elements |
|
|
| 4 |
| value |
Track |
| scoring_system |
ssvc |
| scoring_elements |
SSVCv2/E:N/A:N/T:T/P:M/B:A/M:M/D:T/2024-11-25T18:18:17Z/ |
|
|
| url |
https://github.com/run-llama/llama_index/pull/13523 |
|
| 5 |
|
| 6 |
|
| 7 |
|
| 8 |
| reference_url |
https://github.com/run-llama/llama_index/compare/v0.10.37...v0.10.38 |
| reference_id |
v0.10.37...v0.10.38 |
| reference_type |
|
| scores |
| 0 |
| value |
8.8 |
| scoring_system |
cvssv3.1 |
| scoring_elements |
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H |
|
| 1 |
| value |
9.8 |
| scoring_system |
cvssv3.1 |
| scoring_elements |
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H |
|
| 2 |
| value |
9.3 |
| scoring_system |
cvssv4 |
| scoring_elements |
CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N |
|
| 3 |
| value |
CRITICAL |
| scoring_system |
generic_textual |
| scoring_elements |
|
|
| 4 |
| value |
Track |
| scoring_system |
ssvc |
| scoring_elements |
SSVCv2/E:N/A:N/T:T/P:M/B:A/M:M/D:T/2024-11-25T18:18:17Z/ |
|
|
| url |
https://github.com/run-llama/llama_index/compare/v0.10.37...v0.10.38 |
|
|
| fixed_packages |
|
| aliases |
CVE-2024-45201, GHSA-fxc2-8m62-m85x, PYSEC-2024-192
|
| risk_score |
4.5 |
| exploitability |
0.5 |
| weighted_severity |
9.0 |
| resource_url |
http://public2.vulnerablecode.io/vulnerabilities/VCID-z131-hxnn-nyax |
|
|
|---|