Lucene search
+L

34 matches found

PyPA
PyPA
•added 2026/07/07 4:02 p.m.•31 views

LlamaIndex is vulnerable to Path Traversal attack through its ObsidianReader class

A vulnerability in the ObsidianReader class in LlamaIndex Readers Integration: Obsidian before version 0.5.1 from the run-llama/llamaindex repository versions 0.12.23 to 0.12.28 allows for arbitrary file read through symbolic links. The ObsidianReader fails to resolve symlinks to their real paths...

7.5CVSS7.2AI score0.00637EPSS
SaveExploits1References8Affected Software1
Rows per page
Query Builder