CVE-2024-12911

A flaw was found in the run-llama/llamaindex repository. This vulnerability allows arbitrary file creation and denial of service DoS attacks via SQL injection through prompt injection. Mitigation Mitigation for this issue is either not available or the currently available options do not meet the...

CVE-2024-12911 SQL Injection in run-llama/llama_index

A vulnerability in the defaultjsonalyzer function of the JSONalyzeQueryEngine in the run-llama/llamaindex repository allows for SQL injection via prompt injection. This can lead to arbitrary file creation and Denial-of-Service DoS attacks. The vulnerability affects the latest version and is fixed...