CVE-2025-5472

3 advisories.

PyPI/llama-index-core CVE-2025-5472: medium 6.5, EPSS 0.39%

LlamaIndex vulnerable to DoS attack through uncontrolled recursive JSON parsing

Action: Upgrade llama-index-core to 0.12.38 or later.

pip install llama-index-core==0.12.38

Affected

introduced	fixed	last affected
0	0.12.38	-

Fixed versions

0.12.38

Sources

CVE-2025-5472 · published 2025-07-07T12:30:23Z · modified 2026-07-13T07:26:37.515124865Z · JSON

PyPI/llama-index CVE-2025-5472: medium 6.5, EPSS 0.39%

The JSONReader in run-llama/llama_index versions 0.12.28 is vulnerable to a stack overflow due to uncontrolled recursive JSON parsing. This vulnerability allows attackers to trigger a Denial of Servic

Action: Upgrade llama-index to 0.12.38 or later.

pip install llama-index==0.12.38

Affected

introduced	fixed	last affected
0.12.28	0.12.38	-

Fixed versions

0.12.38

Sources

CVE-2025-5472 · published 2025-07-07T10:15:28.873Z · modified 2026-07-13T07:26:37.515124865Z · JSON

PyPI/llama-index-core CVE-2025-5472: medium 6.5, EPSS 0.39%

LlamaIndex vulnerable to DoS attack through uncontrolled recursive JSON parsing

Action: Upgrade llama-index-core to 0.12.38 or later.

pip install llama-index-core==0.12.38

Affected

introduced	fixed	last affected
0	0.12.38	-

Fixed versions

0.12.38

Sources

CVE-2025-5472 · published 2026-07-07T16:02:57.029091Z · modified 2026-07-13T07:26:37.515124865Z · JSON