Vulnerability DB

VULNERABILITY	AFFECTS	TYPE	PUBLISHED
H Deserialization of Untrusted Data	llama-index[,0.12.41)	pip	8 Jul 2025
H Uncontrolled Recursion	llama-index[,0.12.38)	pip	8 Jul 2025
H Uncontrolled Recursion	llama-index-core[,0.12.38)	pip	8 Jul 2025
M Directory Traversal	llama-index[,0.12.41)	pip	8 Jul 2025
M Directory Traversal	llama-index-readers-obsidian[,0.5.2)	pip	8 Jul 2025
H Directory Traversal	llama-index[,0.12.28)	pip	8 Jul 2025
H Directory Traversal	llama-index-readers-obsidian[,0.5.1)	pip	8 Jul 2025
M Regular Expression Denial of Service (ReDoS)	transformers[4.49.0,4.51.0)	pip	8 Jul 2025
M Regular Expression Denial of Service (ReDoS)	transformers[4.49.0,4.51.0)	pip	8 Jul 2025
M Regular Expression Denial of Service (ReDoS)	transformers[4.49.0,4.51.0)	pip	8 Jul 2025
M Expected Behavior Violation	llama-index[,0.12.28)	pip	8 Jul 2025
M Expected Behavior Violation	llama-index-readers-papers[,0.3.2)	pip	8 Jul 2025
H Improper Restriction of Recursive Entity References in DTDs ('XML Entity Expansion')	llama-index[,0.12.29)	pip	8 Jul 2025
H Improper Restriction of Recursive Entity References in DTDs ('XML Entity Expansion')	llama-index-readers-web[,0.3.9)	pip	8 Jul 2025
H Improper Restriction of Recursive Entity References in DTDs ('XML Entity Expansion')	llama-index-readers-stripe-docs[,0.3.1)	pip	8 Jul 2025
H Improper Restriction of Recursive Entity References in DTDs ('XML Entity Expansion')	llama-index-readers-papers[,0.3.2)	pip	8 Jul 2025
M SQL Injection	litellm[1.48.18,1.74.9.dev2)	pip	4 Jul 2025
M Missing Authentication for Critical Function	xinference[0,]	pip	4 Jul 2025
M Out-of-Bounds	pillow[2.5.0,3.1.2)	pip	3 Jul 2025
M Authentication Bypass Using an Alternate Path or Channel	sentry[0,]	pip	2 Jul 2025
H Heap-based Buffer Overflow	pillow[11.2.1,11.3.0)	pip	2 Jul 2025
M Directory Traversal	dbgpt[0,]	pip	30 Jun 2025
C Improper Verification of Cryptographic Signature	rfc3161-client[,1.0.3)	pip	27 Jun 2025
M Buffer Overflow	matplotlib[,1.5.0)	pip	27 Jun 2025
M Improper Neutralization of Special Elements Used in a Template Engine	pyspur[0,]	pip	26 Jun 2025
M Deserialization of Untrusted Data	pypickle[,2.0.0)	pip	26 Jun 2025
M Improper Authorization	pypickle[,2.0.0)	pip	26 Jun 2025
H Improper Neutralization	octoprint[,1.11.2)	pip	26 Jun 2025
M External Control of File Name or Path	octoprint[,1.11.2)	pip	26 Jun 2025
M Directory Traversal	python-a2a[,0.5.6)	pip	25 Jun 2025

APPLICATION

OPERATING SYSTEM