llama-index vulnerabilities (PyPI)
22 vulnerabilities.
-
llama-indexPyPI LlamaIndex <= 0.11.6 BGEM3Index Unsafe Deserialization 8.4 High -
llama-indexPyPI LlamaIndex <= 0.12.2 VannaQueryEngine SQL Execution Allows Resource Exhaustion 8.7 High -
llama-indexPyPI World-Writable NLTK Cache Directory Vulnerability in run-llama/llama_index 7.1 High -
llama-indexPyPI MD5 Hash Collision in run-llama/llama_index 6.5 Medium -
llama-indexPyPI Arbitrary File Read through Path Traversal in run-llama/llama_index 7.5 High -
llama-indexPyPI Denial of Service via Uncontrolled Recursive JSON Parsing in JSONReader in run-llama/llama_index 6.5 Medium -
llama-indexPyPI Hardlink-Based Path Traversal in run-llama/llama_index 6.2 Medium -
llama-indexPyPI Path Traversal via Symbolic Links in run-llama/llama_index 7.5 High -
llama-indexPyPI MD5 Hash Collision in run-llama/llama_index 5.3 Medium -
llama-indexPyPI XML Entity Expansion vulnerability in run-llama/llama_index 7.5 High -
llama-indexPyPI Unsafe Deserialization in JsonPickleSerializer Enables Remote Code Execution in run-llama/llama_index 5.0 Medium -
llama-indexPyPI SQL Injection in run-llama/llama_index 9.8 Critical -
llama-indexPyPI SQL Injection in run-llama/llama_index 9.8 Critical -
llama-indexPyPI Command Injection in LLama-Index CLI in run-llama/llama_index 7.8 High -
llama-indexPyPI Denial of Service in run-llama/llama_index 7.5 High -
llama-indexPyPI SQL Injection in run-llama/llama_index 7.1 High -
llama-indexPyPI Denial of Service in run-llama/llama_index 4.2 Medium -
llama-indexPyPI Denial of Service (DoS) in run-llama/llama_index 7.5 High -
llama-indexPyPI LlamaIndex includes an exec call for `import {cls_name}` 8.8 High -
llama-indexPyPI Command Injection in run-llama/llama_index 8.8 High -
llama-indexPyPI SQL injection in llama-index 9.8 Critical -
llama-indexPyPI llama-index vulnerable to arbitrary code execution 9.8 Critical