EUVD-2025-19200

Malicious code in bioql PyPI...

EUVD-2024-33149

Malicious code in bioql PyPI...

EUVD-2024-3357

Malicious code in bioql PyPI...

EUVD-2024-39638

Malicious code in bioql PyPI...

EUVD-2025-4342

Malicious code in bioql PyPI...

EUVD-2025-16628

Malicious code in bioql PyPI...

CVE-2025-7647

The llama-index-core package, up to version 0.12.44, contains a vulnerability in the getcachedir function where a predictable, hardcoded directory path /tmp/llamaindex is used on Linux systems without proper security controls. This vulnerability allows attackers on multi-user systems to steal...

llama-index-core insecurely handles temporary files

The llama-index-core package, up to version 0.12.44, contains a vulnerability in the getcachedir function where a predictable, hardcoded directory path /tmp/llamaindex is used on Linux systems without proper security controls. This vulnerability allows attackers on multi-user systems to steal...

agent-path (>=0.1.0, <=0.1.2), agentc-llamaindex (0.2.5a2) +830 more potentially affected by CVE-2025-7647 via llama-index-core (>=0.9.56, <=0.12.52.post1)

llama-index-core PYPI version =0.9.56, =0.1.0, =0.0.2, =0.1.0a0.dev0, =0.2.0a0, =0.0.6, =1.1.0a20250429, =3.0.0, =1.0.5, =0.1.0, =1.0.0, =0.0.3, =1.0.0rc1, =0.2.0, =0.2.1 and more Source cves: CVE-2025-7647 Source advisory: GHSA-CR7Q-2W66-HJCM...

agent-path (>=0.1.0, <=0.1.2), agentc-llamaindex (0.2.5a2) +830 more potentially affected by CVE-2025-7647 via llama-index-core (>=0.9.56, <=0.12.52.post1)

llama-index-core PYPI version =0.9.56, =0.1.0, =0.0.2, =0.1.0a0.dev0, =0.2.0a0, =0.0.6, =1.1.0a20250429, =3.0.0, =1.0.5, =0.1.0, =1.0.0, =0.0.3, =1.0.0rc1, =0.2.0, =0.2.1 and more Source cves: CVE-2025-7647 Source advisory: OSV:GHSA-CR7Q-2W66-HJCM...

GHSA-CR7Q-2W66-HJCM llama-index-core insecurely handles temporary files

The llama-index-core package, up to version 0.12.44, contains a vulnerability in the getcachedir function where a predictable, hardcoded directory path /tmp/llamaindex is used on Linux systems without proper security controls. This vulnerability allows attackers on multi-user systems to steal...

aimon-llamaindex (>=0.0.6, <=0.0.9), aiqtoolkit-llama-index (>=1.1.0a20250429, <=1.2.0rc1) +674 more potentially affected by CVE-2025-7647 via llama-index-core (>=0.9.56, <=0.12.48)

llama-index-core PYPI version =0.9.56, =0.0.6, =1.1.0a20250429, =3.0.0, =1.0.0, =0.0.3, =1.0.0rc1, =0.2.1.dev0, =0.2.1.dev0, =0.2.0, =0.1.3, =0.1.169, =0.1.3, =0.3.0, =0.1.10, =0.1.0b1, =0.4.0.dev2 and more Source cves: CVE-2025-7647 Source advisory: SNYK:PYTHON-LLAMAINDEXCORE-13110240...

Creation of Temporary File With Insecure Permissions

Overview llama-index-core is an Interface between LLMs and your data Affected versions of this package are vulnerable to Creation of Temporary File With Insecure Permissions via the getcachedir function, which uses a predictable and hardcoded directory path /tmp/llamaindex without proper security...

CVE-2025-7647

The llama-index-core package, up to version 0.12.44, contains a vulnerability in the getcachedir function where a predictable, hardcoded directory path /tmp/llamaindex is used on Linux systems without proper security controls. This vulnerability allows attackers on multi-user systems to steal...

CVE-2025-7647

CVE-2025-7647 affects llama-index-core up to version 0.12.44, with a vulnerability in get_cache_dir() that uses a predictable, hardcoded directory path (/tmp/llama_index) on Linux. On multi-user Linux systems, this insecure temporary directory can enable local attackers to steal proprietary model...

CVE-2025-7647

The llama-index-core package, up to version 0.12.44, contains a vulnerability in the "getcachedir" function where a predictable, hardcoded directory path "/tmp/llamaindex" is used on Linux systems without proper security controls. This vulnerability allows attackers on multi-user systems to steal...

agent-path (>=0.1.0, <=0.1.2), agentc-llamaindex (0.2.5a2) +830 more potentially affected by CVE-2025-7647 via llama-index-core (>=0.9.56, <=0.12.52.post1)

llama-index-core PYPI version =0.9.56, =0.1.0, =0.0.2, =0.1.0a0.dev0, =0.2.0a0, =0.0.6, =1.1.0a20250429, =3.0.0, =1.0.5, =0.1.0, =1.0.0, =0.0.3, =1.0.0rc1, =0.2.0, =0.2.1 and more Source cves: CVE-2025-7647 Source advisory: MEND:CVE-2025-7647...

CVE-2025-7647 Insecure Temporary File Handling in run-llama/llama_index

The llama-index-core package, up to version 0.12.44, contains a vulnerability in the getcachedir function where a predictable, hardcoded directory path /tmp/llamaindex is used on Linux systems without proper security controls. This vulnerability allows attackers on multi-user systems to steal...

CVE-2025-7647 Insecure Temporary File Handling in run-llama/llama_index

The llama-index-core package, up to version 0.12.44, contains a vulnerability in the getcachedir function where a predictable, hardcoded directory path /tmp/llamaindex is used on Linux systems without proper security controls. This vulnerability allows attackers on multi-user systems to steal...

CVE-2025-7647 Insecure Temporary File Handling in run-llama/llama_index

The llama-index-core package, up to version 0.12.44, contains a vulnerability in the getcachedir function where a predictable, hardcoded directory path /tmp/llamaindex is used on Linux systems without proper security controls. This vulnerability allows attackers on multi-user systems to steal...