airunner (>=3.0.0, <=3.1.14), llama-index-packs-arize-phoenix-query-engine (>=0.0.2, <=0.1.4) +2 more potentially affected by CVE-2025-3225 via llama-index-readers-web (>=0.0.1, <=0.3.5)

llama-index-readers-web PYPI version =0.0.1, =3.0.0, =0.0.2, =0.1.0, =0.1.0, =0.2.8 Source cves: CVE-2025-3225 Source advisory: SNYK:PYTHON-LLAMAINDEXREADERSWEB-10645574...

Expected Behavior Violation

Overview llama-index-readers-papers is a llama-index readers papers integration Affected versions of this package are vulnerable to Expected Behavior Violation via the ArxivReader process. An attacker can cause data loss by uploading papers with identical titles but different contents, resulting ...

Expected Behavior Violation

Overview llama-index is an Interface between LLMs and your data Affected versions of this package are vulnerable to Expected Behavior Violation via the ArxivReader process. An attacker can cause data loss by uploading papers with identical titles but different contents, resulting in one paper...

agentbuddy (0.1.1.dev33), aiqtoolkit-llama-index (>=1.1.0a20250429, <=1.2.0rc1) +80 more potentially affected by CVE-2025-3044 via llama-index (>=0.4.17, <=0.12.22)

llama-index PYPI version =0.4.17, =1.1.0a20250429, =3.0.0, =1.0.2, =0.0.1, =0.0.33, =0.18.2, =0.3.2, =0.1.1, =0.3.8.0, =1.2.3, =0.1.0, =0.0.8, =0.1.1, =0.1.6 and more Source cves: CVE-2025-3044 Source advisory: SNYK:PYTHON-LLAMAINDEX-10645579...

Directory Traversal

Overview llama-index-readers-obsidian is a llama-index readers obsidian integration Affected versions of this package are vulnerable to Directory Traversal via the ObsidianReader process. An attacker can access arbitrary files outside the intended directory by creating symbolic links that point t...

Directory Traversal

Overview llama-index is an Interface between LLMs and your data Affected versions of this package are vulnerable to Directory Traversal via the ObsidianReader process. An attacker can access arbitrary files outside the intended directory by creating symbolic links that point to sensitive files,...

agentbuddy (0.1.1.dev33), aiqtoolkit-llama-index (>=1.1.0a20250429, <=1.2.0rc1) +80 more potentially affected by CVE-2025-3046 via llama-index (>=0.4.17, <=0.12.22)

llama-index PYPI version =0.4.17, =1.1.0a20250429, =3.0.0, =1.0.2, =0.0.1, =0.0.33, =0.18.2, =0.3.2, =0.1.1, =0.3.8.0, =1.2.3, =0.1.0, =0.0.8, =0.1.1, =0.1.6 and more Source cves: CVE-2025-3046 Source advisory: SNYK:PYTHON-LLAMAINDEX-10645583...

agentbuddy (0.1.1.dev33), aiqtoolkit-llama-index (>=1.1.0a20250429, <=1.2.0rc1) +88 more potentially affected by CVE-2025-6210 via llama-index (>=0.4.17, <=0.12.38)

llama-index PYPI version =0.4.17, =1.1.0a20250429, =3.0.0, =1.0.5, =1.0.2, =0.0.1, =0.0.33, =0.18.2, =0.3.2, =0.1.1, =0.3.8.0, =1.2.3, =0.1.0, =0.0.8, =0.0.9 and more Source cves: CVE-2025-6210 Source advisory: SNYK:PYTHON-LLAMAINDEX-10645585...

Uncontrolled Recursion

Overview llama-index is an Interface between LLMs and your data Affected versions of this package are vulnerable to Uncontrolled Recursion via the JSONReader process. An attacker can cause the application to crash by submitting deeply nested JSON structures, resulting in a stack overflow and...

agentbuddy (0.1.1.dev33), aiqtoolkit-llama-index (>=1.1.0a20250429, <=1.2.0rc1) +85 more potentially affected by CVE-2025-5472 via llama-index (>=0.4.17, <=0.12.36)

llama-index PYPI version =0.4.17, =1.1.0a20250429, =3.0.0, =1.0.5, =1.0.2, =0.0.1, =0.0.33, =0.18.2, =0.3.2, =0.1.1, =0.3.8.0, =1.2.3, =0.1.0, =0.0.8, =0.0.9 and more Source cves: CVE-2025-5472 Source advisory: SNYK:PYTHON-LLAMAINDEX-10645587...

aimon-llamaindex (>=0.0.6, <=0.0.9), aiqtoolkit-llama-index (>=1.1.0a20250429, <=1.2.0rc1) +671 more potentially affected by CVE-2025-5472 via llama-index-core (>=0.9.56, <=0.12.37)

llama-index-core PYPI version =0.9.56, =0.0.6, =1.1.0a20250429, =3.0.0, =1.0.0, =0.0.3, =1.0.0rc1, =0.2.1.dev0, =0.2.1.dev0, =0.1.3, =0.1.169, =0.1.3, =0.3.0, =0.1.0b1, =0.0.52, =0.0.2, =0.0.5 and more Source cves: CVE-2025-5472 Source advisory: SNYK:PYTHON-LLAMAINDEXCORE-10645586...

berri-ai (>=0.18.2, <=0.21.3), browserpilot (>=0.1.1, <=0.2.34) +6 more potentially affected by CVE-2025-6210 via llama-index (>=0.4.17, <=0.4.40)

llama-index PYPI version =0.4.17, =0.18.2, =0.1.1, =0.1.0, =0.0.1, =10.9.6, =0.7.0, =0.0.36, =0.0.37 Source cves: CVE-2025-6210 Source advisory: OSV:PYSEC-2025-252...

PYSEC-2025-252

A vulnerability in the ObsidianReader class of the run-llama/llamaindex repository, specifically in version 0.12.27, allows for hardlink-based path traversal. This flaw permits attackers to bypass path restrictions and access sensitive system files, such as /etc/passwd, by exploiting hardlinks. T...

PYSEC-2025-252

A vulnerability in the ObsidianReader class of the run-llama/llamaindex repository, specifically in version 0.12.27, allows for hardlink-based path traversal. This flaw permits attackers to bypass path restrictions and access sensitive system files, such as /etc/passwd, by exploiting hardlinks. T...

appscriptz (>=1.0.5, <=1.0.6), digital-life (>=0.2.53, <=0.2.57) +3 more potentially affected by CVE-2025-5472 via llama-index (>=0.12.30, <=0.12.36)

llama-index PYPI version =0.12.30, =1.0.5, =0.2.53, =1.0.4, =1.1.3 - promptlibz 1.0.2 Source cves: CVE-2025-5472 Source advisory: OSV:PYSEC-2025-251...

PYSEC-2025-251

The JSONReader in run-llama/llamaindex versions 0.12.28 is vulnerable to a stack overflow due to uncontrolled recursive JSON parsing. This vulnerability allows attackers to trigger a Denial of Service DoS by submitting deeply nested JSON structures, leading to a RecursionError and crashing...

PYSEC-2025-250

An XML Entity Expansion vulnerability, also known as a 'billion laughs' attack, exists in the sitemap parser of the run-llama/llamaindex repository, specifically affecting version v0.12.21. This vulnerability allows an attacker to supply a malicious Sitemap XML, leading to a Denial of Service DoS...

aiqtoolkit-llama-index (1.2.0rc1), nvidia-nat-llama-index (1.2.0rc5) +1 more potentially affected by CVE-2025-3225 via llama-index (>=0.12.21, <=0.12.22)

llama-index PYPI version =0.12.21, =2.5.10, =2.5.19 Source cves: CVE-2025-3225 Source advisory: OSV:PYSEC-2025-250...

CVE-2025-3225

An XML Entity Expansion vulnerability, also known as a 'billion laughs' attack, exists in the sitemap parser of the run-llama/llamaindex repository, specifically affecting version v0.12.21. This vulnerability allows an attacker to supply a malicious Sitemap XML, leading to a Denial of Service DoS...

PYSEC-2025-247

A vulnerability in the ArxivReader class of the run-llama/llamaindex repository, versions up to v0.12.22.post1, allows for MD5 hash collisions when generating filenames for downloaded papers. This can lead to data loss as papers with identical titles but different contents may overwrite each othe...