6612 matches found
Insecure Temporary File
Overview llama-index-core is an Interface between LLMs and your data Affected versions of this package are vulnerable to Insecure Temporary File due to setting the NLTK data directory to a shared, world-writable subdirectory. An attacker can overwrite, delete, or corrupt data files by exploiting...
llama-index has Insecure Temporary File
The llamaindex library version 0.12.33 sets the NLTK data directory to a subdirectory of the codebase by default, which is world-writable in multi-user environments. This configuration allows local users to overwrite, delete, or corrupt NLTK data files, leading to potential denial of service, dat...
GHSA-RG9H-VX28-XXP5 llama-index has Insecure Temporary File
The llamaindex library version 0.12.33 sets the NLTK data directory to a subdirectory of the codebase by default, which is world-writable in multi-user environments. This configuration allows local users to overwrite, delete, or corrupt NLTK data files, leading to potential denial of service, dat...
EUVD-2025-34071
llama-index has Insecure Temporary File...
CVE-2025-7707 World-Writable NLTK Cache Directory Vulnerability in run-llama/llama_index
The llamaindex library version 0.12.33 sets the NLTK data directory to a subdirectory of the codebase by default, which is world-writable in multi-user environments. This configuration allows local users to overwrite, delete, or corrupt NLTK data files, leading to potential denial of service, dat...
CVE-2025-7707
The CVE-2025-7707 entry concerns llama_index 0.12.33, where NLTK data directory is set to a subdirectory of the codebase, creating a world-writable shared cache and enabling local data tampering, DoS, or privilege escalation. Connected disclosures confirm the issue and point to fixes/upgrades: re...
[SECURITY] Fedora 42 Update: docker-buildkit-0.25.0-1.fc42
Concurrent, cache-efficient, and Dockerfile-agnostic builder toolkit...
AlmaLinux 10 : toolbox (ALSA-2025:13674)
The remote AlmaLinux 10 host has packages installed that are affected by a vulnerability as referenced in the ALSA-2025:13674 advisory. nvidia-container-toolkit: Privilege Escalation via Hook Initialization in NVIDIA Container Toolkit CVE-2025-23266 Tenable has extracted the preceding description...
rexml: REXML ReDoS vulnerability
A flaw was found in the ReXML XML toolkit for Ruby. Parsing XML data containing a large number of digits between & and x...; in a hex numeric character reference &x...; can trigger a regular expression denial of service ReDoS condition, leading to a denial of service...
[SECURITY] Fedora 42 Update: openssl-3.2.6-2.fc42
The OpenSSL toolkit provides support for secure communications between machines. OpenSSL includes a certificate management tool and shared libraries which provide various cryptographic algorithms and protocols...
RockyLinux 10 : toolbox (RLSA-2025:13674)
The remote RockyLinux 10 host has packages installed that are affected by a vulnerability as referenced in the RLSA-2025:13674 advisory. nvidia-container-toolkit: Privilege Escalation via Hook Initialization in NVIDIA Container Toolkit CVE-2025-23266 Tenable has extracted the preceding descriptio...
The vulnerability of the nvJPEG library in the NVIDIA CUDA Toolkit, which allows a hacker to trigger a service failure.
The vulnerability of the nvJPEG library in the NVIDIA CUDA Toolkit for parallel computing on Graphics Processors involves a lack of protection against division by zero. Exploiting this vulnerability can allow attackers to trigger a service failure using a specially created JPEG file...
EUVD-2021-1475
Malware in sbrugna...
EUVD-2021-14584
Malware in sbrugna...
EUVD-2004-1788
Malware in sbrugna...
EUVD-2021-19812
Malware in sbrugna...
EUVD-2012-5943
Malware in sbrugna...
EUVD-2015-5463
Malware in sbrugna...