CVE-2024-58339
1 advisory.
PyPI/llama-index CVE-2024-58339: high 7.5, EPSS 0.65%
LlamaIndex (run-llama/llama_index) versions up to and including 0.12.2 contain an uncontrolled resource consumption vulnerability in the VannaPack VannaQueryEngine implementation. The custom_query() l
Action: Upgrade llama-index to 0.12.3 or later.
pip install llama-index==0.12.3Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | 0.12.3 | - |
Fixed versions
| 0.12.3 |
Sources
- osv: PYSEC-2026-86
- https://www.llamaindex.ai/
- https://www.vulncheck.com/advisories/llamaindex-vannaqueryengine-sql-execution-allows-resource-exhaustion
- https://github.com/run-llama/llama_index
- https://huntr.com/bounties/a1d6c30d-fce0-412a-bd22-14e0d4c1fa1f
CVE-2024-58339 · published · modified · JSON