agent-path (>=0.1.0, <=0.1.2), agentc-llamaindex (0.2.5a2) +830 more potentially affected by CVE-2025-7647 via llama-index-core (>=0.9.56, <=0.12.52.post1)

llama-index-core PYPI version =0.9.56, =0.1.0, =0.0.2, =0.1.0a0.dev0, =0.2.0a0, =0.0.6, =1.1.0a20250429, =3.0.0, =1.0.5, =0.1.0, =1.0.0, =0.0.3, =1.0.0rc1, =0.2.0, =0.2.1 and more Source cves: CVE-2025-7647 Source advisory: GHSA-CR7Q-2W66-HJCM...

GHSA-CR7Q-2W66-HJCM llama-index-core insecurely handles temporary files

The llama-index-core package, up to version 0.12.44, contains a vulnerability in the getcachedir function where a predictable, hardcoded directory path /tmp/llamaindex is used on Linux systems without proper security controls. This vulnerability allows attackers on multi-user systems to steal...

agent-path (>=0.1.0, <=0.1.2), agentc-llamaindex (0.2.5a2) +830 more potentially affected by CVE-2025-7647 via llama-index-core (>=0.9.56, <=0.12.52.post1)

llama-index-core PYPI version =0.9.56, =0.1.0, =0.0.2, =0.1.0a0.dev0, =0.2.0a0, =0.0.6, =1.1.0a20250429, =3.0.0, =1.0.5, =0.1.0, =1.0.0, =0.0.3, =1.0.0rc1, =0.2.0, =0.2.1 and more Source cves: CVE-2025-7647 Source advisory: OSV:GHSA-CR7Q-2W66-HJCM...

Creation of Temporary File With Insecure Permissions

Overview llama-index-core is an Interface between LLMs and your data Affected versions of this package are vulnerable to Creation of Temporary File With Insecure Permissions via the getcachedir function, which uses a predictable and hardcoded directory path /tmp/llamaindex without proper security...

aimon-llamaindex (>=0.0.6, <=0.0.9), aiqtoolkit-llama-index (>=1.1.0a20250429, <=1.2.0rc1) +675 more potentially affected by CVE-2025-7647 via llama-index-core (>=0.9.56, <=0.12.48)

llama-index-core PYPI version =0.9.56, =0.0.6, =1.1.0a20250429, =3.0.0, =1.0.0, =0.0.3, =1.0.0rc1, =0.2.1.dev0, =0.2.1.dev0, =0.2.0, =0.1.3, =0.1.169, =0.1.3, =0.3.0, =0.1.10, =0.1.0b1, =0.4.0.dev2 and more Source cves: CVE-2025-7647 Source advisory: SNYK:PYTHON-LLAMAINDEXCORE-13110240...

CVE-2025-7647

The llama-index-core package, up to version 0.12.44, contains a vulnerability in the getcachedir function where a predictable, hardcoded directory path /tmp/llamaindex is used on Linux systems without proper security controls. This vulnerability allows attackers on multi-user systems to steal...

CVE-2025-7647 Insecure Temporary File Handling in run-llama/llama_index

The llama-index-core package, up to version 0.12.44, contains a vulnerability in the getcachedir function where a predictable, hardcoded directory path /tmp/llamaindex is used on Linux systems without proper security controls. This vulnerability allows attackers on multi-user systems to steal...

agent-path (>=0.1.0, <=0.1.2), agentc-llamaindex (0.2.5a2) +830 more potentially affected by CVE-2025-7647 via llama-index-core (>=0.9.56, <=0.12.52.post1)

llama-index-core PYPI version =0.9.56, =0.1.0, =0.0.2, =0.1.0a0.dev0, =0.2.0a0, =0.0.6, =1.1.0a20250429, =3.0.0, =1.0.5, =0.1.0, =1.0.0, =0.0.3, =1.0.0rc1, =0.2.0, =0.2.1 and more Source cves: CVE-2025-7647 Source advisory: MEND:CVE-2025-7647...

CVE-2025-7647 Insecure Temporary File Handling in run-llama/llama_index

The llama-index-core package, up to version 0.12.44, contains a vulnerability in the getcachedir function where a predictable, hardcoded directory path /tmp/llamaindex is used on Linux systems without proper security controls. This vulnerability allows attackers on multi-user systems to steal...

CVE-2025-7647

CVE-2025-7647 affects llama-index-core up to version 0.12.44, with a vulnerability in get_cache_dir() that uses a predictable, hardcoded directory path (/tmp/llama_index) on Linux. On multi-user Linux systems, this insecure temporary directory can enable local attackers to steal proprietary model...

CVE-2025-7647 Insecure Temporary File Handling in run-llama/llama_index

The llama-index-core package, up to version 0.12.44, contains a vulnerability in the getcachedir function where a predictable, hardcoded directory path /tmp/llamaindex is used on Linux systems without proper security controls. This vulnerability allows attackers on multi-user systems to steal...

CVE-2025-11016

A security vulnerability has been detected in kalcaddle kodbox up to 1.61.09. The affected element is the function fileOut of the file app/controller/explorer/index.class.php. Such manipulation of the argument path leads to path traversal. The attack may be performed from remote. The exploit has...

Malicious code in tronlastpy (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: kam193 45dfbc47ce737fe6b6913f21effbdaebc4a156b837c598449f0f96a6b15754a3 Package appears to be designed for private key exfiltration, but no known usage. The name appears to be related to the cryptocurrency TRX Tron / Tronix. Some...

MAL-2025-48908 Malicious code in tronlastpy (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: kam193 45dfbc47ce737fe6b6913f21effbdaebc4a156b837c598449f0f96a6b15754a3 Package appears to be designed for private key exfiltration, but no known usage. The name appears to be related to the cryptocurrency TRX Tron / Tronix. Some...

Itsourcecode Open Source Job Portal SQL Injection Vulnerability

itsourcecode Open Source Job Portal is itsourcecode open source a business portal site . A SQL injection vulnerability exists in itsourcecode Open Source Job Portal version 1.0, which stems from incorrect manipulation of the parameter ID in the file /jobportal/admin/category/index.php, which coul...

CVE-2025-7647: Creation of Temporary File With Insecure Permissions

The llama-index-core package, up to version 0.12.44, contains a vulnerability in the getcachedir function where a predictable, hardcoded directory path /tmp/llamaindex is used on Linux systems without proper security controls. This vulnerability allows attackers on multi-user systems to steal...

SUSE SLES15 Security Update : kernel (SUSE-SU-2025:03382-1)

The remote SUSE Linux SLES15 host has a package installed that is affected by multiple vulnerabilities as referenced in the SUSE-SU-2025:03382-1 advisory. The SUSE Linux Enterprise 15 SP7 RT kernel was updated to receive various security bugfixes. The following security bugs were fixed: -...

Malicious code in tronlast (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: kam193 8b8fb3ac2b3c204497c05a7ac21606b47fea8209c79762e816f4016602aafe8b Package appears to be designed for private key exfiltration, but no known usage. The name appears to be related to the cryptocurrency TRX Tron / Tronix. Some...

MAL-2025-48907 Malicious code in tronlast (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: kam193 8b8fb3ac2b3c204497c05a7ac21606b47fea8209c79762e816f4016602aafe8b Package appears to be designed for private key exfiltration, but no known usage. The name appears to be related to the cryptocurrency TRX Tron / Tronix. Some...

CVE-2025-11040 code-projects Hostel Management System index.php sql injection

A vulnerability was detected in code-projects Hostel Management System 1.0. Affected by this issue is some unknown functionality of the file /justines/admin/modusers/index.php?view=view. The manipulation of the argument ID results in sql injection. The attack can be executed remotely. The exploit...