llama-index@0.10.0 vulnerabilities
Interface between LLMs and your data
-
latest version
0.10.37
-
first published
a year ago
-
latest version published
2 days ago
-
licenses detected
- [0,)
Direct Vulnerabilities
Known vulnerabilities in the llama-index package. This does not include vulnerabilities belonging to this package’s dependencies.
Automatically find and fix vulnerabilities affecting your projects. Snyk scans for vulnerabilities and provides fixes for free.Vulnerability | Vulnerable Version |
---|---|
llama-index is an Interface between LLMs and your data Affected versions of this package are vulnerable to Improper Control of Generation of Code ('Code Injection') in the How to fix Improper Control of Generation of Code ('Code Injection')? Upgrade |
[0.9.47,0.10.13)
|
llama-index is an Interface between LLMs and your data Affected versions of this package are vulnerable to Command Injection due to the How to fix Command Injection? Upgrade |
[,0.10.24)
|
llama-index is an Interface between LLMs and your data Affected versions of this package are vulnerable to SQL Injection via the Text-to-SQL feature in How to fix SQL Injection? There is no fixed version for |
[0,)
|