CVE-2025-3225 XML Entity Expansion vulnerability in run-llama/llama_index

An XML Entity Expansion vulnerability, also known as a 'billion laughs' attack, exists in the sitemap parser of the run-llama/llamaindex repository, specifically affecting version v0.12.21. This vulnerability allows an attacker to supply a malicious Sitemap XML, leading to a Denial of Service DoS...

CVE-2025-3225 XML Entity Expansion vulnerability in run-llama/llama_index

An XML Entity Expansion vulnerability, also known as a 'billion laughs' attack, exists in the sitemap parser of the run-llama/llamaindex repository, specifically affecting version v0.12.21. This vulnerability allows an attacker to supply a malicious Sitemap XML, leading to a Denial of Service DoS...

CVE-2025-3225

The CVE-2025-3225 issue affects the run-llama/llama_index project, specifically its sitemap parser, where an XML Entity Expansion (billion laughs) vulnerability exists in version v0.12.21. This can be triggered by a malicious Sitemap XML to cause Denial of Service via memory exhaustion, potential...

CVE-2025-3225: Improper Restriction of Recursive Entity References in DTDs

An XML Entity Expansion vulnerability, also known as a 'billion laughs' attack, exists in the sitemap parser of the run-llama/llamaindex repository, specifically affecting version v0.12.21. This vulnerability allows an attacker to supply a malicious Sitemap XML, leading to a Denial of Service DoS...

LlamaIndex 安全漏洞

LlamaIndex is a data framework for LLM applications from the LlamaIndex open source. A security vulnerability exists in LlamaIndex version 0.12.21, which stems from an XML entity extension vulnerability in the sitemap parser that could lead to a denial of service attack...

PT-2025-28149

Name of the Vulnerable Software and Affected Versions: llama index versions v0.12.21 through v0.12.28 Description: An XML Entity Expansion vulnerability, also known as a 'billion laughs' attack, exists in the sitemap parser of the run-llama/llama index repository. This issue allows an attacker to...

MAL-2025-5634 Malicious code in token-renewal (npm)

The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware de8c5eaca0b97fb9aad23e47e1d86057e671884d4b4f12781413b41d3d01e358 Any computer that has this package installed or running should be considered...

Exploit for CVE-2025-49493

CVE-2025-49493 Akamai CloudTest - XXE Injection ☁️ 📄 Descr...

PT-2025-67: XML external entity leads to Local File Read and Server-side request forgery in FastReport.NET

The vulnerability was identified in FastReport .NET, versions 2024.2.20. The discovered vulnerability, due to the ability to inject and expand external entities, can be exploited by an attacker to read arbitrary local files and perform server‑side request forgery SSRF with full response retrieval...

Malicious code in n8n-nodes-zalo-user-v2 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware b5b947fc267d5c40a50dc48860ddebb3d7ab7b78e58d65e0b97ddec970698856 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

DRUPAL-CONTRIB-2025-086

This module enables you to use config\pages as a content entity. The module doesn't check permission or entity access before rendering config\pages content...

Malicious code in solana-dextrade-parser (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 6b8f89467fb69d00785530ca32444043368fe523570c7f428d485319782d845a Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in env-info-checker-kyy3w4fiurevd8uy43wfre (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 1d6fb3feadb029e83e642c54a8ffc29782d65e981a2bd769dc972463231215b1 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in discord-rpc-presence (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 643ae80a9f56002d18b03d93bba332b1c1c49c5d45f995a1269030b4a3c90b7e Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in rpc-selfbot (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 0b1911508710ad71ac01a6d39ebf112ea34136d68fe9c8631c647eb52e009b31 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in ipmi-command (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 4ae45e03814e3e6804cac4e616877eecf2a0865d1ab813e7a2a273778899bc16 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in twilio-webchat-widget (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 5ab5419528c85b4b675bfd8bd45c7d107e151b10606f24a8ef7c9b9192dd6f14 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in taskrouter-event-listener (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware a6bba47f8505eeeef34953080b36ace84d8fd303c36ee00977a2d00f9447a4eb Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in azure-sentinel (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 37e43a68053a45c1fcdea9e752fd9c13f6906e780ab5b8ff5436b3f1b5533d18 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in supply-frontend-runtime (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 15d83c3652e60a9d06ecdfb747c183a04299a54f3da58cb81144ff7461286b33 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...