CVE-2025-1793
2 advisories.
PyPI/llama-index CVE-2025-1793: critical 9.8, EPSS 0.66%
llama_index vulnerable to SQL Injection
Action: Upgrade llama-index to 0.12.28 or later.
pip install llama-index==0.12.28Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | 0.12.28 | - |
Fixed versions
| 0.12.28 |
Sources
- osv: GHSA-v3c8-3pr6-gr7p
- https://nvd.nist.gov/vuln/detail/CVE-2025-1793
- https://github.com/run-llama/llama_index/commit/0008041e8dde8e519621388e5d6f558bde6ef42e
- https://github.com/advisories/GHSA-v3c8-3pr6-gr7p
- https://github.com/pypa/advisory-database/tree/main/vulns/llama-index/PYSEC-2026-394.yaml
- https://github.com/run-llama/llama_index
- https://huntr.com/bounties/8cb1555a-9655-4122-b0d6-60059e79183c
- https://pypi.org/project/llama-index
CVE-2025-1793 · published · modified · JSON
PyPI/llama-index CVE-2025-1793: critical 9.8, EPSS 0.66%
llama_index vulnerable to SQL Injection
Action: Upgrade llama-index to 0.12.28 or later.
pip install llama-index==0.12.28Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | 0.12.28 | - |
Fixed versions
| 0.12.28 |
Sources
- osv: PYSEC-2026-394
- https://nvd.nist.gov/vuln/detail/CVE-2025-1793
- https://github.com/run-llama/llama_index/commit/0008041e8dde8e519621388e5d6f558bde6ef42e
- https://github.com/run-llama/llama_index
- https://huntr.com/bounties/8cb1555a-9655-4122-b0d6-60059e79183c
- https://pypi.org/project/llama-index
- https://github.com/advisories/GHSA-v3c8-3pr6-gr7p
CVE-2025-1793 · published · modified · JSON