CVE-2024-12704 Denial of Service (DoS) in run-llama/llama_index

A vulnerability in the LangChainLLM class of the run-llama/llamaindex repository, version v0.12.5, allows for a Denial of Service DoS attack. The streamcomplete method executes the llm using a thread and retrieves the result via the getresponsegen method of the StreamingGeneratorCallbackHandler...

CVE-2024-12704

A vulnerability in the LangChainLLM class of the run-llama/llamaindex repository, version v0.12.5, allows for a Denial of Service DoS attack. The streamcomplete method executes the llm using a thread and retrieves the result via the getresponsegen method of the StreamingGeneratorCallbackHandler...

CVE-2024-11449

A vulnerability in haotian-liu/llava version 1.2.0 LLaVA-1.6 allows for Server-Side Request Forgery SSRF through the /run/predict endpoint. An attacker can gain unauthorized access to internal networks or the AWS metadata endpoint by sending crafted requests that exploit insufficient validation o...

PT-2025-12140

Name of the Vulnerable Software and Affected Versions run-llama/llama index version v0.12.5 Description A vulnerability in the LangChainLLM class allows for a Denial of Service DoS attack. The stream complete method executes the llm using a thread and retrieves the result via the get response gen...

H2O 资源管理错误漏洞

H2O is an in-memory platform for distributed, scalable machine learning open-sourced by H2O.ai. A resource management error vulnerability exists in H2O version 3.46.0.1, which stems from the runtool command exposing classes in the water.tools package via the ast parser, which could lead to a deni...

CVE-2024-10901: Unrestricted Upload of File with Dangerous Type

In eosphoros-ai/db-gpt version v0.6.0, the web API POST /api/v1/editor/chart/run allows execution of arbitrary SQL queries without any access control. This vulnerability can be exploited by attackers to perform Arbitrary File Write, enabling them to write arbitrary files to the victim's file...

CVE-2024-12910: Uncontrolled Recursion

A vulnerability in the KnowledgeBaseWebReader class of the run-llama/llamaindex repository, version latest, allows an attacker to cause a Denial of Service DoS by controlling a URL variable to contain the root URL. This leads to infinite recursive calls to the getarticleurls method, exhausting...

CVE-2024-12911: Improper Neutralization of Special Elements used in an SQL Command

A vulnerability in the defaultjsonalyzer function of the JSONalyzeQueryEngine in the run-llama/llamaindex repository allows for SQL injection via prompt injection. This can lead to arbitrary file creation and Denial-of-Service DoS attacks. The vulnerability affects the latest version and is fixed...

PT-2025-12162

Name of the Vulnerable Software and Affected Versions aimhubio/aim version 3.19.3 Description A vulnerability in the "runs/delete-batch" endpoint allows for arbitrary file or directory deletion through path traversal. The endpoint does not mitigate path traversal when handling user-specified...

PT-2025-12245

Name of the Vulnerable Software and Affected Versions aimhubio/aim version bb76afe Description A vulnerability in the LockManager.release locks function allows for arbitrary file deletion through relative path traversal. The run hash parameter, which is user-controllable, is concatenated without...

PT-2025-12237

Name of the Vulnerable Software and Affected Versions modelscope/agentscope version 21161fe Description A stored cross-site scripting XSS issue exists in the view for inspecting detailed run information. This occurs because a user-controllable string, the run ID, is appended and rendered as HTML,...

CVE-2024-8556: Improper Neutralization of Input During Web Page Generation

A stored cross-site scripting XSS vulnerability exists in modelscope/agentscope, as of the latest commit 21161fe on the main branch. The vulnerability occurs in the view for inspecting detailed run information, where a user-controllable string run ID is appended and rendered as HTML. This allows ...

CVE-2024-12704: Loop with Unreachable Exit Condition

A vulnerability in the LangChainLLM class of the run-llama/llamaindex repository, version v0.12.5, allows for a Denial of Service DoS attack. The streamcomplete method executes the llm using a thread and retrieves the result via the getresponsegen method of the StreamingGeneratorCallbackHandler...

PT-2025-12166

Name of the Vulnerable Software and Affected Versions aimhubio/aim version 3.19.3 Description A vulnerability allows an attacker to exploit the tarfile.extractall function to extract the contents of a maliciously crafted tarfile to arbitrary locations on the host server. The attacker can control...

PT-2025-12157

Name of the Vulnerable Software and Affected Versions run-llama/llama index version latest Description A Denial of Service DoS issue exists due to infinite recursive calls to the get article urls method when a URL variable is controlled to contain the root URL, potentially exhausting system...

CVE-2024-11449: Server-Side Request Forgery (SSRF)

A vulnerability in haotian-liu/llava version 1.2.0 LLaVA-1.6 allows for Server-Side Request Forgery SSRF through the /run/predict endpoint. An attacker can gain unauthorized access to internal networks or the AWS metadata endpoint by sending crafted requests that exploit insufficient validation o...

PT-2025-12156

Name of the Vulnerable Software and Affected Versions llama-index-packs-finchat versions up to v0.3.0 run-llama/llama index versions up to v0.12.3 Description A vulnerability exists in the FinanceChatLlamaPack component, allowing for SQL injection in the run sql query function within the database...

PT-2025-12073

Name of the Vulnerable Software and Affected Versions eosphoros-ai/db-gpt version v0.6.0 Description The issue allows execution of arbitrary SQL queries without access control through the web API endpoint POST /api/v1/editor/sql/run. This can be exploited to perform Arbitrary File Write using...

AZL-58867 CVE-2024-40635 affecting package containerd2 for versions less than 2.0.0-8

containerd is an open-source container runtime. A bug was found in containerd prior to versions 1.6.38, 1.7.27, and 2.0.4 where containers launched with a User set as a UID:GID larger than the maximum 32-bit signed integer can cause an overflow condition where the container ultimately runs as roo...

CVE-2024-40635

containerd is an open-source container runtime. A bug was found in containerd prior to versions 1.6.38, 1.7.27, and 2.0.4 where containers launched with a User set as a "UID:GID" larger than the maximum 32-bit signed integer can cause an overflow condition where the container ultimately runs as...