llama-index vulnerabilities

Interface between LLMs and your data

0.14.7

2 years ago

5 days ago

Known vulnerabilities in the llama-index package. This does not include vulnerabilities belonging to this package’s dependencies.

Snyk's AI Trust Platform automatically finds the best upgrade path and integrates with your development workflows. Secure your code at zero cost.

Vulnerability	Vulnerable Version
M Expected Behavior Violation	[,0.12.41)
C Arbitrary File Write via Archive Extraction (Zip Slip)	[,0.12.41)
H Deserialization of Untrusted Data	[,0.12.41)
H Uncontrolled Recursion	[,0.12.38)
M Directory Traversal	[,0.12.41)
H Directory Traversal	[,0.12.28)
M Expected Behavior Violation	[,0.12.28)
H Improper Restriction of Recursive Entity References in DTDs ('XML Entity Expansion')	[,0.12.29)
H Improper Control of Generation of Code ('Code Injection')	[,0.10.38)
H Improper Control of Generation of Code ('Code Injection')	[0.9.47,0.10.13)
C Command Injection	[,0.10.24)
H Arbitrary Code Execution	[,0.9.5)

489 VERSIONS IN TOTAL See all versions