Lucene search
+L

3 matches found

OSV
OSV
added 2026/07/07 4:2 p.m.9 views

PYSEC-2026-1568 LlamaIndex is vulnerable to Path Traversal attack through its ObsidianReader class

A vulnerability in the ObsidianReader class in LlamaIndex Readers Integration: Obsidian before version 0.5.1 from the run-llama/llamaindex repository versions 0.12.23 to 0.12.28 allows for arbitrary file read through symbolic links. The ObsidianReader fails to resolve symlinks to their real paths...

7.5CVSS7.1AI score0.00555EPSS
SaveExploits1References8
Rows per page
Query Builder