PyPI/llama-index-readers-papers CVE-2025-3044: medium 5.3, EPSS 0.32%
LlamaIndex vulnerability in ArxivReader class can cause MD5 hash collisions
Action: Upgrade llama-index-readers-papers to 0.3.1 or later.
pip install llama-index-readers-papers==0.3.1Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | 0.3.1 | - |
Fixed versions
| 0.3.1 |
Sources
- osv: GHSA-p7j4-jwjf-5x9w
- https://nvd.nist.gov/vuln/detail/CVE-2025-3044
- https://github.com/run-llama/llama_index/commit/0008041e8dde8e519621388e5d6f558bde6ef42e
- https://github.com/run-llama/llama_index/commit/f69e1c0e7579228fec4cfaf716e4f951e131de77
- https://github.com/run-llama/llama_index
- https://huntr.com/bounties/80182c3a-876f-422f-8bac-38267e0345d6
CVE-2025-3044 · published · modified · JSON