run-llama vulnerabilities

CVEs per yearBy the year they were published

1. 20243
2. 202520
3. 20263

Newest CVEs

• CVE-2025-6208

  Uncontrolled Memory Consumption in run-llama/llama_index

  run-llama · run-llama/llama_index

  Medium5.3
• CVE-2024-14021

  LlamaIndex <= 0.11.6 BGEM3Index Unsafe Deserialization

  run-llama · llama_index

  High8.4
• CVE-2024-58339

  LlamaIndex <= 0.12.2 VannaQueryEngine SQL Execution Allows Resource Exhaustion

  run-llama · llama_index

  High8.7
• CVE-2025-7707

  World-Writable NLTK Cache Directory Vulnerability in run-llama/llama_index

  run-llama · run-llama/llama_index

  High7.1
• CVE-2025-7647

  Insecure Temporary File Handling in run-llama/llama_index

  run-llama · run-llama/llama_index

  High7.3
• CVE-2025-5302

  Denial of Service (DOS) in JSONReader in run-llama/llama_index

  run-llama · run-llama/llama_index

  High8.6
• CVE-2025-6211

  MD5 Hash Collision in run-llama/llama_index

  run-llama · run-llama/llama_index

  Medium6.5
• CVE-2025-6209

  Arbitrary File Read through Path Traversal in run-llama/llama_index

  run-llama · run-llama/llama_index

  High7.5
• CVE-2025-5472

  Denial of Service via Uncontrolled Recursive JSON Parsing in JSONReader in run-llama/llama_index

  run-llama · run-llama/llama_index

  Medium6.5
• CVE-2025-6210

  Hardlink-Based Path Traversal in run-llama/llama_index

  run-llama · run-llama/llama_index

  Medium6.2