Llamaindex vulnerabilities

Products

• Llamaindex 24

Newest

• llamaindex, run-llama llama index +1 more LlamaIndex <= 0.11.6 BGEM3Index Unsafe Deserialization CVE-2024-14021 Fix available 8.4 HighJanuary 12, 2026
• llamaindex, run-llama llama index +1 more LlamaIndex <= 0.12.2 VannaQueryEngine SQL Execution Allows Resource Exhaustion CVE-2024-58339 Fix available 8.7 HighJanuary 12, 2026
• llamaindex, run-llama run-llama/llama index +1 more World-Writable NLTK Cache Directory Vulnerability in run-llama/llama_index CVE-2025-7707 Fix available 7.1 HighOctober 13, 2025
• llamaindex, run-llama run-llama/llama index +1 more MD5 Hash Collision in run-llama/llama_index CVE-2025-6211 Fix available 6.5 MediumJuly 10, 2025
• llamaindex, run-llama run-llama/llama index +1 more Arbitrary File Read through Path Traversal in run-llama/llama_index CVE-2025-6209 Fix available 7.5 HighJuly 7, 2025
• llamaindex, run-llama run-llama/llama index +1 more Denial of Service via Uncontrolled Recursive JSON Parsing in JSONReader in run-llama/llama_index CVE-2025-5472 Fix available 6.5 MediumJuly 7, 2025
• llamaindex, run-llama run-llama/llama index +1 more Hardlink-Based Path Traversal in run-llama/llama_index CVE-2025-6210 Fix available 6.2 MediumJuly 7, 2025
• llamaindex, run-llama run-llama/llama index +1 more Path Traversal via Symbolic Links in run-llama/llama_index CVE-2025-3046 Fix available 7.5 HighJuly 7, 2025
• llamaindex, run-llama run-llama/llama index +1 more MD5 Hash Collision in run-llama/llama_index CVE-2025-3044 Fix available 5.3 MediumJuly 7, 2025
• llamaindex, run-llama run-llama/llama index +1 more XML Entity Expansion vulnerability in run-llama/llama_index CVE-2025-3225 Fix available 7.5 HighJuly 7, 2025
• llamaindex, run-llama run-llama/llama index +1 more Unsafe Deserialization in JsonPickleSerializer Enables Remote Code Execution in run-llama/llama_index CVE-2025-3108 Fix available 5.0 MediumJuly 6, 2025
• llamaindex, run-llama run-llama/llama index +1 more SQL Injection in run-llama/llama_index CVE-2025-1793 Fix available 9.8 CriticalJune 5, 2025
• llamaindex, run-llama run-llama/llama index +1 more SQL Injection in run-llama/llama_index CVE-2025-1750 Fix available 9.8 CriticalJune 2, 2025
• llamaindex, run-llama run-llama/llama index +1 more Command Injection in LLama-Index CLI in run-llama/llama_index CVE-2025-1753 Fix available 7.8 HighMay 28, 2025
• llamaindex, run-llama run-llama/llama index +1 more Denial of Service in run-llama/llama_index CVE-2025-1752 Fix available 7.5 HighMay 10, 2025
• llamaindex, run-llama run-llama/llama index +1 more SQL Injection in run-llama/llama_index CVE-2024-11958 Fix available 9.8 CriticalMarch 20, 2025
• llamaindex, run-llama run-llama/llama index +1 more SQL Injection in run-llama/llama_index CVE-2024-12911 Fix available 7.1 HighMarch 20, 2025
• llamaindex, run-llama run-llama/llama index +1 more SQL Injection to RCE in run-llama/llama_index CVE-2024-12909 10.0 CriticalMarch 20, 2025
• llamaindex, run-llama run-llama/llama index +1 more Denial of Service in run-llama/llama_index CVE-2024-12910 Fix available 4.2 MediumMarch 20, 2025
• llamaindex, run-llama run-llama/llama index +1 more Denial of Service (DoS) in run-llama/llama_index CVE-2024-12704 Fix available 7.5 HighMarch 20, 2025
• llamaindex LlamaIndex includes an exec call for `import {cls_name}` CVE-2024-45201 Fix available 8.8 HighAugust 22, 2024
• llamaindex, run-llama llama index, run-llama/llama index +2 more Command Injection in run-llama/llama_index CVE-2024-4181 Fix available 8.8 HighMay 16, 2024
• llamaindex, run-llama llama index, run-llama/llama index +2 more Command Injection in run-llama/llama_index CVE-2024-3271 Fix available 9.8 CriticalApril 16, 2024
• llamaindex SQL injection in llama-index CVE-2024-23751 Fix available 9.8 CriticalJanuary 22, 2024