CRITICAL9.8PyPI
GHSA-2jxw-4hm4-6w87· CVE-2024-23751, PYSEC-2024-12SQL injection in llama-index
Modified: 2/16/2024
package
PyPI/llama-index
pkg:pypi/llama-index
CRITICAL9.8PyPI
GHSA-2xxc-73fv-36f7· CVE-2023-39662, PYSEC-2023-148llama-index vulnerable to arbitrary code execution
Modified: 9/30/2024
MEDIUM6.5PyPI
GHSA-5hq9-5r78-2gjh· CVE-2025-6211, PYSEC-2026-1566LlamaIndex vulnerable to data loss through hash collisions in its DocugamiReader class
Modified: 9/10/2026
HIGH7.5PyPI
GHSA-7c85-87cp-mr6g· CVE-2025-1752, PYSEC-2026-1554LlamaIndex Vulnerable to Denial of Service (DoS)
Modified: 7/7/2026
HIGH7.1PyPI
GHSA-jmgm-gx32-vp4w· CVE-2024-12911, PYSEC-2026-1555LlamaIndex vulnerable to Creation of Temporary File in Directory with Insecure Permissions
Modified: 7/7/2026
MEDIUM5.9PyPI
GHSA-jvpf-xf32-2w4q· CVE-2024-12910, PYSEC-2025-11LlamaIndex Uncontrolled Resource Consumption vulnerability
Modified: 10/15/2025
HIGH8.8PyPI
GHSA-pw38-xv9x-h8ch· CVE-2024-4181, PYSEC-2024-324RunGptLLM class in LlamaIndex has a command injection
Modified: 7/13/2026
HIGH7.1PyPI
GHSA-rg9h-vx28-xxp5· CVE-2025-7707, PYSEC-2026-1556llama-index has Insecure Temporary File
Modified: 7/7/2026
CRITICAL9.8PyPI
GHSA-v3c8-3pr6-gr7p· CVE-2025-1793, PYSEC-2026-394llama_index vulnerable to SQL Injection
Modified: 9/10/2026
CRITICAL9.8PyPI
PYSEC-2023-148· CVE-2023-39662, GHSA-2xxc-73fv-36f7Modified: 6/10/2026
—PyPI
PYSEC-2024-12· CVE-2024-23751, GHSA-2jxw-4hm4-6w87Modified: 6/10/2026
—PyPI
PYSEC-2024-192· CVE-2024-45201, GHSA-fxc2-8m62-m85xModified: 6/29/2026
HIGH8.8PyPI
PYSEC-2024-324· CVE-2024-4181, GHSA-pw38-xv9x-h8chModified: 7/13/2026
MEDIUM5.9PyPI
PYSEC-2025-11· CVE-2024-12910, GHSA-jvpf-xf32-2w4qModified: 6/10/2026
HIGH7.5PyPI
PYSEC-2025-244· CVE-2024-12704, GHSA-j3wr-m6xh-64hgModified: 7/13/2026
CRITICAL9.8PyPI
PYSEC-2025-245· CVE-2025-1750Modified: 7/13/2026
HIGH7.8PyPI
PYSEC-2025-246· CVE-2025-1753, GHSA-g99h-56mw-8263Modified: 7/13/2026
MEDIUM5.3PyPI
PYSEC-2025-247· CVE-2025-3044, GHSA-p7j4-jwjf-5x9wModified: 7/13/2026
HIGH7.5PyPI
PYSEC-2025-248· CVE-2025-3046, GHSA-fmrf-6jv9-qjc7Modified: 7/13/2026
HIGH7.5PyPI
PYSEC-2025-249· CVE-2025-3108, GHSA-m84c-4c34-28gfModified: 7/13/2026
HIGH7.5PyPI
PYSEC-2025-250· CVE-2025-3225, GHSA-w42r-mrx7-c633Modified: 7/13/2026
MEDIUM6.5PyPI
PYSEC-2025-251· CVE-2025-5472, GHSA-3wxx-q3gv-pvvvModified: 7/13/2026
MEDIUM6.2PyPI
PYSEC-2025-252· CVE-2025-6210, GHSA-3j8r-jf9w-5cmhModified: 7/13/2026
—PyPI
PYSEC-2025-65· CVE-2025-6209, GHSA-2rhq-96q8-4vjqModified: 7/7/2026
HIGH7.5PyPI
PYSEC-2026-1554· CVE-2025-1752, GHSA-7c85-87cp-mr6gLlamaIndex Vulnerable to Denial of Service (DoS)
Modified: 7/7/2026
HIGH7.1PyPI
PYSEC-2026-1555· CVE-2024-12911, GHSA-jmgm-gx32-vp4wLlamaIndex vulnerable to Creation of Temporary File in Directory with Insecure Permissions
Modified: 7/7/2026
HIGH7.1PyPI
PYSEC-2026-1556· CVE-2025-7707, GHSA-rg9h-vx28-xxp5llama-index has Insecure Temporary File
Modified: 7/7/2026
MEDIUM6.5PyPI
PYSEC-2026-2606· CVE-2025-6211, GHSA-5hq9-5r78-2gjhLlamaIndex vulnerable to data loss through hash collisions in its DocugamiReader class
Modified: 7/13/2026
CRITICAL9.8PyPI
PYSEC-2026-394· CVE-2025-1793, GHSA-v3c8-3pr6-gr7pllama_index vulnerable to SQL Injection
Modified: 7/1/2026
HIGH7.8PyPI
PYSEC-2026-85· CVE-2024-14021Modified: 5/20/2026
HIGH7.5PyPI
PYSEC-2026-86· CVE-2024-58339Modified: 5/20/2026