document-qa-engine (>=0.4.0, <=0.6.0), explainitall (>=1.0.0, <=1.0.2) +8 more potentially affected by CVE-2026-68770 via sentence-transformers (2.6.1)

sentence-transformers PYPI version 2.6.1 is affected by a known vulnerability. The following packages have a transitive dependency on sentence-transformers and may be impacted: - document-qa-engine =0.4.0, =1.0.0, =1.2.0, =0.0.14, =0.1.1, =0.1.3, =0.0.2, =0.0.3, =0.0.2, =0.1.5 Source cves:...

llama-index-collection (0.1.0), monocle-test-tools (>=0.6.6, <=0.8.10) +5 more potentially affected by CVE-2026-68770 via sentence-transformers (3.3.0)

sentence-transformers PYPI version 3.3.0 is affected by a known vulnerability. The following packages have a transitive dependency on sentence-transformers and may be impacted: - llama-index-collection 0.1.0 - monocle-test-tools =0.6.6, =1.1.3, =14.4.1, =0.1.1, =0.1.3 Source cves: CVE-2026-68770...

llama-index-collection (0.1.0), monocle-test-tools (>=0.6.6, <=0.8.10) +5 more potentially affected by CVE-2026-68770 via sentence-transformers (3.3.0)

sentence-transformers PYPI version 3.3.0 is affected by a known vulnerability. The following packages have a transitive dependency on sentence-transformers and may be impacted: - llama-index-collection 0.1.0 - monocle-test-tools =0.6.6, =1.1.3, =14.4.1, =0.1.1, =0.1.3 Source cves: CVE-2026-68770...

llama-index-readers-docling (0.1.0), quackling (>=0.0.1, <=0.4.1) potentially affected by CVE-2026-31248 via docling (1.20.0)

docling PYPI version 1.20.0 is affected by a known vulnerability. The following packages have a transitive dependency on docling and may be impacted: - llama-index-readers-docling 0.1.0 - quackling =0.0.1, =0.4.1 Source cves: CVE-2026-31248 Source advisory: OSV:PYSEC-2026-2454...

llama-index-readers-docling (0.1.0), quackling (>=0.0.1, <=0.4.1) potentially affected by CVE-2026-31247 via docling (1.20.0)

docling PYPI version 1.20.0 is affected by a known vulnerability. The following packages have a transitive dependency on docling and may be impacted: - llama-index-readers-docling 0.1.0 - quackling =0.0.1, =0.4.1 Source cves: CVE-2026-31247 Source advisory: OSV:PYSEC-2026-2455...

agent-framework-mem0 (>=1.0.0b260319, <=1.0.0b260609), engramd (>=0.1.0, <=0.1.1) +5 more potentially affected by CVE-2026-7597 via mem0ai (1.0.11)

mem0ai PYPI version 1.0.11 is affected by a known vulnerability. The following packages have a transitive dependency on mem0ai and may be impacted: - agent-framework-mem0 =1.0.0b260319, =0.1.0, =0.3.0, =0.1.0b0, =0.2.0, =1.0.0.6, =1.0.6.10 Source cves: CVE-2026-7597 Source advisory:...

llama-index-packs-vanna (>=0.0.1, <=0.1.4) potentially affected by CVE-2026-4229 via vanna (0.0.36)

vanna PYPI version 0.0.36 is affected by a known vulnerability. The following packages have a transitive dependency on vanna and may be impacted: - llama-index-packs-vanna =0.0.1, =0.1.4 Source cves: CVE-2026-4229 Source advisory: OSV:PYSEC-2026-3397...

llama-index-packs-vanna (>=0.1.5, <=0.3.0), nvidia-nat-vanna (>=1.4.0a20260123, <=1.7.0a20260513) +1 more potentially affected by CVE-2026-4229 via vanna (2.0.2)

vanna PYPI version 2.0.2 is affected by a known vulnerability. The following packages have a transitive dependency on vanna and may be impacted: - llama-index-packs-vanna =0.1.5, =1.4.0a20260123, =1.0.0, =2.0.0 Source cves: CVE-2026-4229 Source advisory: OSV:PYSEC-2026-3397...

PYSEC-2026-2606 LlamaIndex vulnerable to data loss through hash collisions in its DocugamiReader class

A vulnerability in the DocugamiReader class of the run-llama/llamaindex repository, up to but excluding version 0.12.41, involves the use of MD5 hashing to generate IDs for document chunks. This approach leads to hash collisions when structurally distinct chunks contain identical text, resulting ...

agentbuddy (0.1.1.dev33), aiqtoolkit-llama-index (>=1.1.0a20250429, <=1.2.0rc1) +88 more potentially affected by CVE-2025-6211 via llama-index (>=0.4.17, <=0.12.38)

llama-index PYPI version =0.4.17, =1.1.0a20250429, =3.0.0, =1.0.5, =1.0.2, =0.0.1, =0.0.33, =0.18.2, =0.3.2, =0.1.1, =0.3.8.0, =1.2.3, =0.1.0, =0.0.8, =0.0.9 and more Source cves: CVE-2025-6211 Source advisory: OSV:PYSEC-2026-2606...

PYSEC-2026-1560 llama-index-core vulnerable to Uncontrolled Resource Consumption

The SimpleDirectoryReader component in llamaindex.core version 0.12.23 suffers from uncontrolled memory consumption due to a resource management flaw. The vulnerability arises because the user-specified file limit numfileslimit is applied after all files in a directory are loaded into memory. Thi...

aimon-llamaindex (>=0.0.6, <=0.0.9), aiqtoolkit-llama-index (>=1.1.0a20250429, <=1.2.0rc1) +671 more potentially affected by CVE-2025-6208 via llama-index-core (>=0.9.56, <=0.12.39)

llama-index-core PYPI version =0.9.56, =0.0.6, =1.1.0a20250429, =3.0.0, =1.0.0, =0.0.3, =1.0.0rc1, =0.2.1.dev0, =0.2.1.dev0, =0.1.3, =0.1.169, =0.1.3, =0.3.0, =0.1.0b1, =0.0.52, =0.0.2, =0.0.5 and more Source cves: CVE-2025-6208 Source advisory: OSV:PYSEC-2026-1560...

llama-index-core vulnerable to Uncontrolled Resource Consumption

The SimpleDirectoryReader component in llamaindex.core version 0.12.23 suffers from uncontrolled memory consumption due to a resource management flaw. The vulnerability arises because the user-specified file limit numfileslimit is applied after all files in a directory are loaded into memory. Thi...

PYSEC-2026-1556 llama-index has Insecure Temporary File

The llamaindex library version 0.12.33 sets the NLTK data directory to a subdirectory of the codebase by default, which is world-writable in multi-user environments. This configuration allows local users to overwrite, delete, or corrupt NLTK data files, leading to potential denial of service, dat...

llama-index has Insecure Temporary File

The llamaindex library version 0.12.33 sets the NLTK data directory to a subdirectory of the codebase by default, which is world-writable in multi-user environments. This configuration allows local users to overwrite, delete, or corrupt NLTK data files, leading to potential denial of service, dat...

agentbuddy (0.1.1.dev33), agentc-llamaindex (0.2.5a2) +129 more potentially affected by CVE-2025-7707 via llama-index (>=0.4.17, <=0.12.52)

llama-index PYPI version =0.4.17, =0.0.2, =0.1.0a0.dev0, =0.2.0a0, =1.1.0a20250429, =3.0.0, =1.0.5, =1.0.2, =0.1.0, =0.0.1, =0.0.33, =0.18.2, =0.3.2, =1.3.1 and more Source cves: CVE-2025-7707 Source advisory: OSV:PYSEC-2026-1556...

PYSEC-2026-1562 llama-index-core insecurely handles temporary files

The llama-index-core package, up to version 0.12.44, contains a vulnerability in the getcachedir function where a predictable, hardcoded directory path /tmp/llamaindex is used on Linux systems without proper security controls. This vulnerability allows attackers on multi-user systems to steal...

agent-path (>=0.1.0, <=0.1.2), agentc-llamaindex (0.2.5a2) +830 more potentially affected by CVE-2025-7647 via llama-index-core (>=0.9.56, <=0.12.52.post1)

llama-index-core PYPI version =0.9.56, =0.1.0, =0.0.2, =0.1.0a0.dev0, =0.2.0a0, =0.0.6, =1.1.0a20250429, =3.0.0, =1.0.5, =0.1.0, =1.0.0, =0.0.3, =1.0.0rc1, =0.2.0, =0.2.1 and more Source cves: CVE-2025-7647 Source advisory: OSV:PYSEC-2026-1562...

LlamaIndex affected by a Denial of Service (DOS) in JSONReader

A denial of service vulnerability exists in the JSONReader component of the run-llama/llamaindex repository, specifically in version v0.12.37. The vulnerability is caused by uncontrolled recursion when parsing deeply nested JSON files, which can lead to Python hitting its maximum recursion depth...

aimon-llamaindex (>=0.0.6, <=0.0.9), aiqtoolkit-llama-index (>=1.1.0a20250429, <=1.2.0rc1) +671 more potentially affected by CVE-2025-5302 via llama-index-core (>=0.9.56, <=0.12.37)

llama-index-core PYPI version =0.9.56, =0.0.6, =1.1.0a20250429, =3.0.0, =1.0.0, =0.0.3, =1.0.0rc1, =0.2.1.dev0, =0.2.1.dev0, =0.1.3, =0.1.169, =0.1.3, =0.3.0, =0.1.0b1, =0.0.52, =0.0.2, =0.0.5 and more Source cves: CVE-2025-5302 Source advisory: OSV:PYSEC-2026-1561...