Out-of-Bounds

Overview Affected versions of this package are vulnerable to Out-of-Bounds via the tokenize function in the file llama-vocab.cpp. An attacker can achieve arbitrary code execution or cause a denial of service by providing specially crafted text input that triggers a heap overflow during the...

PT-2025-26161

Name of the Vulnerable Software and Affected Versions llama index versions prior to 0.12.42 llama index.core versions prior to 0.12.42 Description The SimpleDirectoryReader component in llama index.core is subject to uncontrolled memory consumption due to a flaw in resource management. The num...

UBUNTU-CVE-2025-49847

llama.cpp is an inference of several LLM models in C/C++. Prior to version b5662, an attacker‐supplied GGUF model vocabulary can trigger a buffer overflow in llama.cpp’s vocabulary‐loading code. Specifically, the helper trycopy in llama.cpp/src/vocab.cpp: llamavocab::impl::tokentopiece casts a ve...

ag-llama-api (>=0.0.8, <=0.0.31), ag-llama-api-s (>=0.0.4, <=0.0.11) +118 more potentially affected by CVE-2025-4565 via protobuf (3.20.2)

protobuf PYPI version 3.20.2 is affected by a known vulnerability. The following packages have a transitive dependency on protobuf and may be impacted: - ag-llama-api =0.0.8, =0.0.4, =0.0.4, =0.0.11, =1.31.1, =0.1.0, =0.3.3, =0.0.13, =0.0.2, =0.0.8 and more Source cves: CVE-2025-4565 Source...

PT-2025-25205

Name of the Vulnerable Software and Affected Versions: llama index versions 0.12.23 through 0.12.28 Description: A flaw in the ObsidianReader class allows for arbitrary file read through symbolic links. The ObsidianReader fails to resolve symlinks to their real paths and does not validate whether...

CVE-2025-1793

A flaw was found in llama-index. SQL injection vulnerabilities exist within multiple vector store integrations in version v0.12.21, allowing an attacker to execute arbitrary SQL queries. This issue enables unauthorized reading and writing of data via crafted SQL commands. Successful exploitation...

SQL Injection

Overview llama-index-vector-stores-clickhouse is a LlamaIndex VectorStores Integration: ClickHouse Affected versions of this package are vulnerable to SQL Injection through multiple vector store integrations. An attacker can read and write data using SQL, potentially leading to unauthorized acces...

GHSA-V3C8-3PR6-GR7P llama_index vulnerable to SQL Injection

Multiple vector store integrations in run-llama/llamaindex version v0.12.21 have SQL injection vulnerabilities. These vulnerabilities allow an attacker to read and write data using SQL, potentially leading to unauthorized access to data of other users depending on the usage of the llama-index...

SQL Injection

Overview Affected versions of this package are vulnerable to SQL Injection through multiple vector store integrations. An attacker can read and write data using SQL, potentially leading to unauthorized access to data of other users depending on the usage of the library in a web application...

aimon-llamaindex (>=0.0.6, <=0.0.8), aiqtoolkit-llama-index (>=1.1.0a20250429, <=1.2.0rc1) +670 more potentially affected by CVE-2025-1793 via llama-index-core (>=0.9.56, <=0.12.28)

llama-index-core PYPI version =0.9.56, =0.0.6, =1.1.0a20250429, =3.0.0, =1.0.0, =0.0.3, =1.0.0rc1, =0.2.1.dev0, =0.2.1.dev0, =0.1.3, =0.1.169, =0.1.3, =0.3.0, =0.1.0b1, =0.0.52, =0.0.2, =0.0.5 and more Source cves: CVE-2025-1793 Source advisory: SNYK:PYTHON-LLAMAINDEXCORE-10332647...

agentbuddy (0.1.1.dev33), aiqtoolkit-llama-index (>=1.1.0a20250429, <=1.2.0rc1) +80 more potentially affected by CVE-2025-1793 via llama-index (>=0.4.17, <=0.12.22)

llama-index PYPI version =0.4.17, =1.1.0a20250429, =3.0.0, =1.0.2, =0.0.1, =0.0.33, =0.18.2, =0.3.2, =0.1.1, =0.3.8.0, =1.2.3, =0.1.0, =0.0.8, =0.1.1, =0.1.6 and more Source cves: CVE-2025-1793 Source advisory: GHSA-V3C8-3PR6-GR7P...

SQL Injection

Overview Affected versions of this package are vulnerable to SQL Injection through multiple vector store integrations. An attacker can read and write data using SQL, potentially leading to unauthorized access to data of other users depending on the usage of the library in a web application...

agentbuddy (0.1.1.dev33), aiqtoolkit-llama-index (>=1.1.0a20250429, <=1.2.0rc1) +80 more potentially affected by CVE-2025-1793 via llama-index (>=0.4.17, <=0.12.22)

llama-index PYPI version =0.4.17, =1.1.0a20250429, =3.0.0, =1.0.2, =0.0.1, =0.0.33, =0.18.2, =0.3.2, =0.1.1, =0.3.8.0, =1.2.3, =0.1.0, =0.0.8, =0.1.1, =0.1.6 and more Source cves: CVE-2025-1793 Source advisory: OSV:GHSA-V3C8-3PR6-GR7P...

SQL Injection

Overview llama-index-core is an Interface between LLMs and your data Affected versions of this package are vulnerable to SQL Injection through multiple vector store integrations. An attacker can read and write data using SQL, potentially leading to unauthorized access to data of other users...

llama-index-packs-deeplake-deepmemory-retriever (>=0.1.0, <=0.1.4), llama-index-packs-deeplake-multimodal-retrieval (>=0.1.0, <=0.1.4) potentially affected by CVE-2025-1793 via llama-index-vector-stores-deeplake (>=0.1.0, <=0.1.6)

llama-index-vector-stores-deeplake PYPI version =0.1.0, =0.1.0, =0.1.0, =0.1.4 Source cves: CVE-2025-1793 Source advisory: SNYK:PYTHON-LLAMAINDEXVECTORSTORESDEEPLAKE-10332650...

SQL Injection

Overview llama-index-vector-stores-couchbase is a LlamaIndex VectorStores Integration: Couchbase Affected versions of this package are vulnerable to SQL Injection through multiple vector store integrations. An attacker can read and write data using SQL, potentially leading to unauthorized access ...

llama_index vulnerable to SQL Injection

Multiple vector store integrations in run-llama/llamaindex version v0.12.21 have SQL injection vulnerabilities. These vulnerabilities allow an attacker to read and write data using SQL, potentially leading to unauthorized access to data of other users depending on the usage of the llama-index...

CVE-2025-1793

Multiple vector store integrations in run-llama/llamaindex version v0.12.21 have SQL injection vulnerabilities. These vulnerabilities allow an attacker to read and write data using SQL, potentially leading to unauthorized access to data of other users depending on the usage of the llama-index...

CVE-2025-1793 SQL Injection in run-llama/llama_index

Multiple vector store integrations in run-llama/llamaindex version v0.12.21 have SQL injection vulnerabilities. These vulnerabilities allow an attacker to read and write data using SQL, potentially leading to unauthorized access to data of other users depending on the usage of the llama-index...

CVE-2025-1793

Multiple vector store integrations in run-llama/llamaindex version v0.12.21 have SQL injection vulnerabilities. These vulnerabilities allow an attacker to read and write data using SQL, potentially leading to unauthorized access to data of other users depending on the usage of the llama-index...