EUVD-2025-15457

Malicious code in bioql PyPI...

EUVD-2025-1698

Malicious code in bioql PyPI...

EUVD-2023-36665

Malicious code in bioql PyPI...

EUVD-2025-0118

Malicious code in bioql PyPI...

EUVD-2025-19670

Malicious code in bioql PyPI...

EUVD-2023-0537

Malicious code in bioql PyPI...

EUVD-2022-0004

Malicious code in bioql PyPI...

EUVD-2023-45009

Malicious code in bioql PyPI...

EUVD-2023-1031

Malicious code in bioql PyPI...

EUVD-2025-28217

Malicious code in bioql PyPI...

EUVD-2022-5419

Malicious code in bioql PyPI...

EUVD-2023-2579

Malicious code in bioql PyPI...

EUVD-2025-21438

Malicious code in bioql PyPI...

EUVD-2025-13437

Malicious code in bioql PyPI...

GHSA-CR7Q-2W66-HJCM llama-index-core insecurely handles temporary files

The llama-index-core package, up to version 0.12.44, contains a vulnerability in the getcachedir function where a predictable, hardcoded directory path /tmp/llamaindex is used on Linux systems without proper security controls. This vulnerability allows attackers on multi-user systems to steal...

Creation of Temporary File With Insecure Permissions

Overview llama-index-core is an Interface between LLMs and your data Affected versions of this package are vulnerable to Creation of Temporary File With Insecure Permissions via the getcachedir function, which uses a predictable and hardcoded directory path /tmp/llamaindex without proper security...

CVE-2025-7647

The llama-index-core package, up to version 0.12.44, contains a vulnerability in the getcachedir function where a predictable, hardcoded directory path /tmp/llamaindex is used on Linux systems without proper security controls. This vulnerability allows attackers on multi-user systems to steal...

CVE-2025-7647

CVE-2025-7647 affects llama-index-core up to version 0.12.44, with a vulnerability in get_cache_dir() that uses a predictable, hardcoded directory path (/tmp/llama_index) on Linux. On multi-user Linux systems, this insecure temporary directory can enable local attackers to steal proprietary model...

CVE-2025-7647 Insecure Temporary File Handling in run-llama/llama_index

The llama-index-core package, up to version 0.12.44, contains a vulnerability in the getcachedir function where a predictable, hardcoded directory path /tmp/llamaindex is used on Linux systems without proper security controls. This vulnerability allows attackers on multi-user systems to steal...

CVE-2025-7647 Insecure Temporary File Handling in run-llama/llama_index

The llama-index-core package, up to version 0.12.44, contains a vulnerability in the getcachedir function where a predictable, hardcoded directory path /tmp/llamaindex is used on Linux systems without proper security controls. This vulnerability allows attackers on multi-user systems to steal...