CVE-2025-3225

3 advisories.

PyPI/llama-index-readers-papers CVE-2025-3225: high 7.5

LlamaIndex has an XML Entity Expansion vulnerability in its sitemap parser

Action: Upgrade llama-index-readers-papers to 0.3.2 or later.

pip install llama-index-readers-papers==0.3.2

Affected

introduced	fixed	last affected
0	0.3.2	-

Fixed versions

0.3.2

Sources

CVE-2025-3225 · published 2025-07-07T12:30:22Z · modified 2026-07-13T07:26:34.494956192Z · JSON

PyPI/llama-index CVE-2025-3225: high 7.5

An XML Entity Expansion vulnerability, also known as a 'billion laughs' attack, exists in the sitemap parser of the run-llama/llama_index repository, specifically affecting version v0.12.21. This vuln

Action: Upgrade llama-index to 0.12.29 or later.

pip install llama-index==0.12.29

Affected

introduced	fixed	last affected
0.12.21	0.12.29	-

Fixed versions

0.12.29

Sources

CVE-2025-3225 · published 2025-07-07T10:15:27.047Z · modified 2026-07-13T07:26:34.494956192Z · JSON

PyPI/llama-index-readers-papers CVE-2025-3225: high 7.5

LlamaIndex has an XML Entity Expansion vulnerability in its sitemap parser

Action: Upgrade llama-index-readers-papers to 0.3.2 or later.

pip install llama-index-readers-papers==0.3.2

Affected

introduced	fixed	last affected
0	0.3.2	-

Fixed versions

0.3.2

Sources

CVE-2025-3225 · published 2026-07-07T16:02:56.466649Z · modified 2026-07-13T07:26:34.494956192Z · JSON