CVE-2024-11958
2 advisories.
PyPI/llama-index-retrievers-duckdb-retriever CVE-2024-11958: critical 9.8
LlamaIndex Retrievers Integration: DuckDBRetriever SQL Injection
Action: Upgrade llama-index-retrievers-duckdb-retriever to 0.4.0 or later.
pip install llama-index-retrievers-duckdb-retriever==0.4.0Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | 0.4.0 | - |
Fixed versions
| 0.4.0 |
Sources
- osv: GHSA-339r-cjv9-x78g
- https://nvd.nist.gov/vuln/detail/CVE-2024-11958
- https://github.com/run-llama/llama_index/commit/35bd221e948e40458052d30c6ef2779bc965b6d0
- https://github.com/advisories/GHSA-339r-cjv9-x78g
- https://github.com/pypa/advisory-database/tree/main/vulns/llama-index-retrievers-duckdb-retriever/PYSEC-2026-399.yaml
- https://github.com/run-llama/llama_index
- https://huntr.com/bounties/8ddf66e1-f74c-4d53-992b-76bc45cacac1
- https://pypi.org/project/llama-index-retrievers-duckdb-retriever
CVE-2024-11958 · published · modified · JSON
PyPI/llama-index-retrievers-duckdb-retriever CVE-2024-11958: critical 9.8
LlamaIndex Retrievers Integration: DuckDBRetriever SQL Injection
Action: Upgrade llama-index-retrievers-duckdb-retriever to 0.4.0 or later.
pip install llama-index-retrievers-duckdb-retriever==0.4.0Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | 0.4.0 | - |
Fixed versions
| 0.4.0 |
Sources
- osv: PYSEC-2026-399
- https://nvd.nist.gov/vuln/detail/CVE-2024-11958
- https://github.com/run-llama/llama_index/commit/35bd221e948e40458052d30c6ef2779bc965b6d0
- https://github.com/run-llama/llama_index
- https://huntr.com/bounties/8ddf66e1-f74c-4d53-992b-76bc45cacac1
- https://pypi.org/project/llama-index-retrievers-duckdb-retriever
- https://github.com/advisories/GHSA-339r-cjv9-x78g
CVE-2024-11958 · published · modified · JSON