PT-2026-2317

Name of the Vulnerable Software and Affected Versions LlamaIndex versions up to and including 0.11.6 Description LlamaIndex contains an unsafe deserialization issue in the BGEM3Index.load from disk function located in llama index/indices/managed/bge m3/base.py. The function utilizes pickle.load t...