High · 8.8 CVE-2024-45201 EUVD-2024-0094GHSA-fxc2-8m62-m85xPYSEC-2024-192PYSEC-2026-395

LlamaIndex includes an exec call for `import {cls_name}`

Published Aug 22, 2024 · Updated Nov 25, 2024 · Assigned by mitre

Description

An issue was discovered in llama_index before 0.10.38. download/integration.py includes an exec call for import {cls_name}.

Ecosystem	Package	Affected	Fixed	Record
PyPI	llama-index	< 0.10.38	0.10.38	PYSEC-2024-192
PyPI	llama-index-core	< 0.10.38	0.10.38	GHSA-fxc2-8m62-m85x