Log in Start free

run-llama

Products

ProductCVEsExploitedLatest
run-llama/llama_index24–Feb 2, 2026
llama_index2–Jan 12, 2026

Exploited and recent CVEs

  • CVE-2025-6208 Medium 5.3 Uncontrolled Memory Consumption in run-llama/llama_index 0.4%
  • CVE-2024-14021 High 8.4 LlamaIndex <= 0.11.6 BGEM3Index Unsafe Deserialization 0.3%
  • CVE-2024-58339 High 8.7 LlamaIndex <= 0.12.2 VannaQueryEngine SQL Execution Allows Resource Exhaustion 0.6%
  • CVE-2025-7707 High 7.1 World-Writable NLTK Cache Directory Vulnerability in run-llama/llama_index 0.2%
  • CVE-2025-7647 High 7.3 Insecure Temporary File Handling in run-llama/llama_index 0.1%
  • CVE-2025-5302 High 8.6 Denial of Service (DOS) in JSONReader in run-llama/llama_index 0.3%
  • CVE-2025-6211 Medium 6.5 MD5 Hash Collision in run-llama/llama_index 0.4%
  • CVE-2025-6209 High 7.5 Arbitrary File Read through Path Traversal in run-llama/llama_index 0.6%
  • CVE-2025-5472 Medium 6.5 Denial of Service via Uncontrolled Recursive JSON Parsing in JSONReader in run-llama/llama_index 0.4%
  • CVE-2025-6210 Medium 6.2 Hardlink-Based Path Traversal in run-llama/llama_index 0.3%
  • CVE-2025-3046 High 7.5 Path Traversal via Symbolic Links in run-llama/llama_index 0.6%
  • CVE-2025-3044 Medium 5.3 MD5 Hash Collision in run-llama/llama_index 0.3%
  • CVE-2025-3225 High 7.5 XML Entity Expansion vulnerability in run-llama/llama_index 0.5%
  • CVE-2025-3108 Medium 5.0 Unsafe Deserialization in JsonPickleSerializer Enables Remote Code Execution in run-llama/llama_index 0.5%
  • CVE-2025-1793 Critical 9.8 SQL Injection in run-llama/llama_index 0.7%
  • CVE-2025-1750 Critical 9.8 SQL Injection in run-llama/llama_index 0.9%
  • CVE-2025-1753 High 7.8 Command Injection in LLama-Index CLI in run-llama/llama_index 1.1%
  • CVE-2025-1752 High 7.5 Denial of Service in run-llama/llama_index 0.5%
  • CVE-2024-11958 Critical 9.8 SQL Injection in run-llama/llama_index 1.4%
  • CVE-2024-12911 High 7.1 SQL Injection in run-llama/llama_index 0.5%
  • CVE-2024-12909 Critical 10.0 SQL Injection to RCE in run-llama/llama_index 1.4%
  • CVE-2024-12910 Medium 4.2 Denial of Service in run-llama/llama_index 0.7%
  • CVE-2024-12704 High 7.5 Denial of Service (DoS) in run-llama/llama_index 0.8%
  • CVE-2024-4181 High 8.8 Command Injection in run-llama/llama_index 2.1%
  • CVE-2024-3271 Critical 9.8 Command Injection in run-llama/llama_index 2.9%
  • CVE-2024-3098 Critical 9.8 Prompt Injection leading to Arbitrary Code Execution in run-llama/llama_index 1.0%