Lucene search
+L

9 matches found

OSV
OSV
added 2026/07/07 4:3 p.m.8 views

PYSEC-2026-1562 llama-index-core insecurely handles temporary files

The llama-index-core package, up to version 0.12.44, contains a vulnerability in the getcachedir function where a predictable, hardcoded directory path /tmp/llamaindex is used on Linux systems without proper security controls. This vulnerability allows attackers on multi-user systems to steal...

7.3CVSS7AI score0.00134EPSS
SaveExploits0References6
Rows per page
Query Builder