Lucene search
+L

2 matches found

OSV
OSV
added 2026/01/12 11:4 p.m.6 views

CVE-2024-14021 LlamaIndex <= 0.11.6 BGEM3Index Unsafe Deserialization

LlamaIndex run-llama/llamaindex versions up to and including 0.11.6 contain an unsafe deserialization vulnerability in BGEM3Index.loadfromdisk in llamaindex/indices/managed/bgem3/base.py. The function uses pickle.load to deserialize multiembedstore.pkl from a user-supplied persistdir without...

8.4CVSS6.6AI score0.00274EPSS
SaveExploits1References6
Cvelist
Cvelist
added 2026/01/12 11:4 p.m.27 views

CVE-2024-14021 LlamaIndex <= 0.11.6 BGEM3Index Unsafe Deserialization

LlamaIndex run-llama/llamaindex versions up to and including 0.11.6 contain an unsafe deserialization vulnerability in BGEM3Index.loadfromdisk in llamaindex/indices/managed/bgem3/base.py. The function uses pickle.load to deserialize multiembedstore.pkl from a user-supplied persistdir without...

8.4CVSS0.00274EPSS
SaveExploits1References4
Rows per page
Query Builder