Remote Code Execution (RCE)

llama-index-core is vulnerable to Remote Code Execution RCE. The vulnerability is due to the JsonPickleSerializer component falling back to Python’s pickle.loads without proper input validation, allowing execution of arbitrary code from untrusted data...