CVE-2024-12704

PyPI/llama-index-core CVE-2024-12704: high 7.5, EPSS 0.83%

LlamaIndex Improper Handling of Exceptional Conditions vulnerability

Action: Upgrade llama-index-core to 0.12.6 or later.

pip install llama-index-core==0.12.6

Affected

Fixed versions

Sources

• osv: GHSA-j3wr-m6xh-64hg
• https://nvd.nist.gov/vuln/detail/CVE-2024-12704
• https://github.com/run-llama/llama_index/commit/d1ecfb77578d089cbe66728f18f635c09aa32a05
• https://github.com/run-llama/llama_index
• https://huntr.com/bounties/a0b638fd-21c6-4ba7-b381-6ab98472a02a

CVE-2024-12704 · published 2025-03-20T12:32:43Z · modified 2026-07-13T07:26:43.232587643Z · JSON

PyPI/llama-index CVE-2024-12704: high 7.5, EPSS 0.83%

A vulnerability in the LangChainLLM class of the run-llama/llama_index repository, version v0.12.5, allows for a Denial of Service (DoS) attack. The stream_complete method executes the llm using a thr

Action: No fix published. Pin and monitor.

Affected

Fixed versions

No fixed version in the source.

Sources

• osv: PYSEC-2025-244
• https://github.com/run-llama/llama_index/commit/d1ecfb77578d089cbe66728f18f635c09aa32a05
• https://huntr.com/bounties/a0b638fd-21c6-4ba7-b381-6ab98472a02a

CVE-2024-12704 · published 2025-03-20T10:15:29.383Z · modified 2026-07-13T07:26:43.232587643Z · JSON

PyPI/llama-index-core CVE-2024-12704: high 7.5, EPSS 0.83%

LlamaIndex Improper Handling of Exceptional Conditions vulnerability

Action: Upgrade llama-index-core to 0.12.6 or later.

pip install llama-index-core==0.12.6

Affected

Fixed versions

Sources

• osv: PYSEC-2026-1563
• https://nvd.nist.gov/vuln/detail/CVE-2024-12704
• https://github.com/run-llama/llama_index/commit/d1ecfb77578d089cbe66728f18f635c09aa32a05
• https://github.com/run-llama/llama_index
• https://huntr.com/bounties/a0b638fd-21c6-4ba7-b381-6ab98472a02a
• https://pypi.org/project/llama-index-core
• https://github.com/advisories/GHSA-j3wr-m6xh-64hg

CVE-2024-12704 · published 2026-07-07T14:34:53.244852Z · modified 2026-07-13T07:26:43.232587643Z · JSON