Skip to content
OpenAdvisories

Package · PyPI

llama-index-core

10 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

3 results · Clear filters · Feed

  • Medium 5.3
    CVE-2025-6208

    Uncontrolled Memory Consumption in run-llama/llama_index

    The `SimpleDirectoryReader` component in `llama_index.core` version 0.12.23 suffers from uncontrolled memory consumption due to a resource management flaw. The vulnerability arises because the user-specified file limit (`num_files_limit`) is applied after all…

    run-llama run-llama/llama_index llama-index-core PyPI
  • Medium 6.5
    CVE-2025-5472

    Denial of Service via Uncontrolled Recursive JSON Parsing in JSONReader in run-llama/llama_index

    The JSONReader in run-llama/llama_index versions 0.12.28 is vulnerable to a stack overflow due to uncontrolled recursive JSON parsing. This vulnerability allows attackers to trigger a Denial of Service (DoS) by submitting deeply nested JSON structures, leadin…

    run-llama run-llama/llama_index llama-index llama-index-core PyPI
  • Medium 5.0
    CVE-2025-3108

    Unsafe Deserialization in JsonPickleSerializer Enables Remote Code Execution in run-llama/llama_index

    A critical deserialization vulnerability exists in the run-llama/llama_index library's JsonPickleSerializer component, affecting versions v0.12.27 through v0.12.40. This vulnerability allows remote code execution due to an insecure fallback to Python's pickle…

    run-llama run-llama/llama_index llama-index llama-index-core PyPI