Skip to content
OpenAdvisories

Weakness (CWE)

CWE-1112: Incomplete Documentation of Program Execution

Base Incomplete Mapping prohibited

The document does not fully define all mechanisms that are used
to control or influence how product-specific programs are
executed, such as environmental variables, configuration files, registry keys, command-line switches or options, or system settings.

Source: MITRE CWE-1112

All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • Medium 5.0
    CVE-2025-3108

    Unsafe Deserialization in JsonPickleSerializer Enables Remote Code Execution in run-llama/llama_index

    A critical deserialization vulnerability exists in the run-llama/llama_index library's JsonPickleSerializer component, affecting versions v0.12.27 through v0.12.40. This vulnerability allows remote code execution due to an insecure fallback to Python's pickle…

    run-llama run-llama/llama_index llama-index llama-index-core PyPI