PYSEC-2026-86

LlamaIndex run-llama/llamaindex versions up to and including 0.12.2 contain an uncontrolled resource consumption vulnerability in the VannaPack VannaQueryEngine implementation. The customquery logic generates SQL statements from a user-supplied prompt and executes them via vn.runsql without...

LlamaIndex 安全漏洞

LlamaIndex is LlamaIndex open source a data framework for LLM applications. A security vulnerability exists in LlamaIndex 0.12.2 and earlier versions, which stems from a failure to enforce query execution restrictions in the VannaPack VannaQueryEngine implementation, which could lead to a...

CVE-2024-58339: Allocation of Resources Without Limits or Throttling

LlamaIndex run-llama/llamaindex versions up to and including 0.12.2 contain an uncontrolled resource consumption vulnerability in the VannaPack VannaQueryEngine implementation. The customquery logic generates SQL statements from a user-supplied prompt and executes them via vn.runsql without...