Package · PyPI

llama-index-vector-stores-duckdb

1 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

1 result · Feed

Critical 9.8

CVE-2025-1750

SQL Injection in run-llama/llama_index

An SQL injection vulnerability exists in the delete function of DuckDBVectorStore in run-llama/llama_index version v0.12.19. This vulnerability allows an attacker to manipulate the ref_doc_id parameter, enabling them to read and write arbitrary files on the s…

run-llama run-llama/llama_index llama-index llama-index-vector-stores-duckdb PyPI

Jun 2, 2025