berri-ai (>=0.18.2, <=0.21.3), browserpilot (>=0.1.1, <=0.2.34) +6 more potentially affected by CVE-2025-6210 via llama-index (>=0.4.17, <=0.4.40)

llama-index PYPI version =0.4.17, =0.18.2, =0.1.1, =0.1.0, =0.0.1, =10.9.6, =0.7.0, =0.0.36, =0.0.37 Source cves: CVE-2025-6210 Source advisory: OSV:PYSEC-2025-252...

PYSEC-2025-251

The JSONReader in run-llama/llamaindex versions 0.12.28 is vulnerable to a stack overflow due to uncontrolled recursive JSON parsing. This vulnerability allows attackers to trigger a Denial of Service DoS by submitting deeply nested JSON structures, leading to a RecursionError and crashing...

appscriptz (>=1.0.5, <=1.0.6), digital-life (>=0.2.53, <=0.2.57) +3 more potentially affected by CVE-2025-5472 via llama-index (>=0.12.30, <=0.12.36)

llama-index PYPI version =0.12.30, =1.0.5, =0.2.53, =1.0.4, =1.1.3 - promptlibz 1.0.2 Source cves: CVE-2025-5472 Source advisory: OSV:PYSEC-2025-251...

PYSEC-2025-250

An XML Entity Expansion vulnerability, also known as a 'billion laughs' attack, exists in the sitemap parser of the run-llama/llamaindex repository, specifically affecting version v0.12.21. This vulnerability allows an attacker to supply a malicious Sitemap XML, leading to a Denial of Service DoS...

CVE-2025-3225

An XML Entity Expansion vulnerability, also known as a 'billion laughs' attack, exists in the sitemap parser of the run-llama/llamaindex repository, specifically affecting version v0.12.21. This vulnerability allows an attacker to supply a malicious Sitemap XML, leading to a Denial of Service DoS...

aiqtoolkit-llama-index (1.2.0rc1), nvidia-nat-llama-index (1.2.0rc5) +1 more potentially affected by CVE-2025-3225 via llama-index (>=0.12.21, <=0.12.22)

llama-index PYPI version =0.12.21, =2.5.10, =2.5.19 Source cves: CVE-2025-3225 Source advisory: OSV:PYSEC-2025-250...

CVE-2025-3044

A vulnerability in the ArxivReader class of the run-llama/llamaindex repository, versions up to v0.12.22.post1, allows for MD5 hash collisions when generating filenames for downloaded papers. This can lead to data loss as papers with identical titles but different contents may overwrite each othe...

agentbuddy (0.1.1.dev33), aiqtoolkit-llama-index (>=1.1.0a20250429, <=1.2.0rc1) +80 more potentially affected by CVE-2025-3044 via llama-index (>=0.4.17, <=0.12.22)

llama-index PYPI version =0.4.17, =1.1.0a20250429, =3.0.0, =1.0.2, =0.0.1, =0.0.33, =0.18.2, =0.3.2, =0.1.1, =0.3.8.0, =1.2.3, =0.1.0, =0.0.8, =0.1.1, =0.1.6 and more Source cves: CVE-2025-3044 Source advisory: OSV:PYSEC-2025-247...

PYSEC-2025-247

A vulnerability in the ArxivReader class of the run-llama/llamaindex repository, versions up to v0.12.22.post1, allows for MD5 hash collisions when generating filenames for downloaded papers. This can lead to data loss as papers with identical titles but different contents may overwrite each othe...

aimon-llamaindex (>=0.0.6, <=0.0.9), aiqtoolkit-llama-index (>=1.1.0a20250429, <=1.2.0rc1) +671 more potentially affected by CVE-2025-5472 via llama-index-core (>=0.9.56, <=0.12.37)

llama-index-core PYPI version =0.9.56, =0.0.6, =1.1.0a20250429, =3.0.0, =1.0.0, =0.0.3, =1.0.0rc1, =0.2.1.dev0, =0.2.1.dev0, =0.1.3, =0.1.169, =0.1.3, =0.3.0, =0.1.0b1, =0.0.52, =0.0.2, =0.0.5 and more Source cves: CVE-2025-5472 Source advisory: MEND:CVE-2025-5472...

CVE-2025-5472

The JSONReader in run-llama/llamaindex versions 0.12.28 is vulnerable to a stack overflow due to uncontrolled recursive JSON parsing. This vulnerability allows attackers to trigger a Denial of Service DoS by submitting deeply nested JSON structures, leading to a RecursionError and crashing...

CVE-2025-6210 Hardlink-Based Path Traversal in run-llama/llama_index

A vulnerability in the ObsidianReader class of the run-llama/llamaindex repository, specifically in version 0.12.27, allows for hardlink-based path traversal. This flaw permits attackers to bypass path restrictions and access sensitive system files, such as /etc/passwd, by exploiting hardlinks. T...

CVE-2025-6210

A vulnerability in the ObsidianReader class of the run-llama/llamaindex repository, specifically in version 0.12.27, allows for hardlink-based path traversal. This flaw permits attackers to bypass path restrictions and access sensitive system files, such as /etc/passwd, by exploiting hardlinks. T...

CVE-2025-3046

A vulnerability in the "ObsidianReader" class of the run-llama/llamaindex repository, versions 0.12.23 to 0.12.28, allows for arbitrary file read through symbolic links. The "ObsidianReader" fails to resolve symlinks to their real paths and does not validate whether the resolved paths lie within...

CVE-2025-3046 Path Traversal via Symbolic Links in run-llama/llama_index

A vulnerability in the ObsidianReader class of the run-llama/llamaindex repository, versions 0.12.23 to 0.12.28, allows for arbitrary file read through symbolic links. The ObsidianReader fails to resolve symlinks to their real paths and does not validate whether the resolved paths lie within the...

CVE-2025-3044

A vulnerability in the ArxivReader class of the run-llama/llamaindex repository, versions up to v0.12.22.post1, allows for MD5 hash collisions when generating filenames for downloaded papers. This can lead to data loss as papers with identical titles but different contents may overwrite each othe...

CVE-2025-3044 MD5 Hash Collision in run-llama/llama_index

A vulnerability in the ArxivReader class of the run-llama/llamaindex repository, versions up to v0.12.22.post1, allows for MD5 hash collisions when generating filenames for downloaded papers. This can lead to data loss as papers with identical titles but different contents may overwrite each othe...

CVE-2025-3225 XML Entity Expansion vulnerability in run-llama/llama_index

An XML Entity Expansion vulnerability, also known as a 'billion laughs' attack, exists in the sitemap parser of the run-llama/llamaindex repository, specifically affecting version v0.12.21. This vulnerability allows an attacker to supply a malicious Sitemap XML, leading to a Denial of Service DoS...

CVE-2025-3225 XML Entity Expansion vulnerability in run-llama/llama_index

An XML Entity Expansion vulnerability, also known as a 'billion laughs' attack, exists in the sitemap parser of the run-llama/llamaindex repository, specifically affecting version v0.12.21. This vulnerability allows an attacker to supply a malicious Sitemap XML, leading to a Denial of Service DoS...

CVE-2025-3225 XML Entity Expansion vulnerability in run-llama/llama_index

An XML Entity Expansion vulnerability, also known as a 'billion laughs' attack, exists in the sitemap parser of the run-llama/llamaindex repository, specifically affecting version v0.12.21. This vulnerability allows an attacker to supply a malicious Sitemap XML, leading to a Denial of Service DoS...