PyPI/llama-index-readers-docugami CVE-2025-6211: medium 6.5, EPSS 0.36%
LlamaIndex vulnerable to data loss through hash collisions in its DocugamiReader class
Action: Upgrade llama-index-readers-docugami to 0.3.1 or later.
pip install llama-index-readers-docugami==0.3.1Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | 0.3.1 | - |
Fixed versions
| 0.3.1 |
Sources
- osv: PYSEC-2026-1566
- https://nvd.nist.gov/vuln/detail/CVE-2025-6211
- https://github.com/run-llama/llama_index/commit/29b2e07e64ed7d302b1cc058185560b28eaa1352
- https://github.com/run-llama/llama_index
- https://huntr.com/bounties/1a48a011-a3c5-4979-9ffc-9652280bc389
- https://pypi.org/project/llama-index-readers-docugami
- https://github.com/advisories/GHSA-5hq9-5r78-2gjh
CVE-2025-6211 · published · modified · JSON