CVE-2025-3044
3 advisories.
PyPI/llama-index-readers-papers CVE-2025-3044: medium 5.3
LlamaIndex vulnerability in ArxivReader class can cause MD5 hash collisions
Action: Upgrade llama-index-readers-papers to 0.3.1 or later.
pip install llama-index-readers-papers==0.3.1Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | 0.3.1 | - |
Fixed versions
| 0.3.1 |
Sources
- osv: GHSA-p7j4-jwjf-5x9w
- https://nvd.nist.gov/vuln/detail/CVE-2025-3044
- https://github.com/run-llama/llama_index/commit/0008041e8dde8e519621388e5d6f558bde6ef42e
- https://github.com/run-llama/llama_index/commit/f69e1c0e7579228fec4cfaf716e4f951e131de77
- https://github.com/run-llama/llama_index
- https://huntr.com/bounties/80182c3a-876f-422f-8bac-38267e0345d6
CVE-2025-3044 · published · modified · JSON
PyPI/llama-index CVE-2025-3044: medium 5.3
A vulnerability in the ArxivReader class of the run-llama/llama_index repository, versions up to v0.12.22.post1, allows for MD5 hash collisions when generating filenames for downloaded papers. This ca
Action: Upgrade llama-index to 0.12.28 or later.
pip install llama-index==0.12.28Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | 0.12.28 | - |
Fixed versions
| 0.12.28 |
Sources
- osv: PYSEC-2025-247
- https://github.com/run-llama/llama_index/commit/0008041e8dde8e519621388e5d6f558bde6ef42e
- https://huntr.com/bounties/80182c3a-876f-422f-8bac-38267e0345d6
CVE-2025-3044 · published · modified · JSON
PyPI/llama-index-readers-papers CVE-2025-3044: medium 5.3
LlamaIndex vulnerability in ArxivReader class can cause MD5 hash collisions
Action: Upgrade llama-index-readers-papers to 0.3.1 or later.
pip install llama-index-readers-papers==0.3.1Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | 0.3.1 | - |
Fixed versions
| 0.3.1 |
Sources
- osv: PYSEC-2026-1569
- https://nvd.nist.gov/vuln/detail/CVE-2025-3044
- https://github.com/run-llama/llama_index/commit/0008041e8dde8e519621388e5d6f558bde6ef42e
- https://github.com/run-llama/llama_index/commit/f69e1c0e7579228fec4cfaf716e4f951e131de77
- https://github.com/run-llama/llama_index
- https://huntr.com/bounties/80182c3a-876f-422f-8bac-38267e0345d6
- https://pypi.org/project/llama-index-readers-papers
- https://github.com/advisories/GHSA-p7j4-jwjf-5x9w
CVE-2025-3044 · published · modified · JSON