{"action":"No fix published. Pin and monitor.","affected":[{"introduced":"0","last_affected":"0.9.35"}],"component":"llama-index","cve_ids":["CVE-2024-23751"],"ecosystem":"PyPI","epss":0.0066,"exploited":false,"fixed_versions":[],"ghsa_id":"GHSA-2jxw-4hm4-6w87","id":"tcs_01M5KEST1B43RNJZAAV3N7DZX0","modified_at":"2024-02-16T08:23:56.726836Z","published_at":"2024-01-22T03:30:26Z","references":["https://osv.dev/vulnerability/GHSA-2jxw-4hm4-6w87","https://nvd.nist.gov/vuln/detail/CVE-2024-23751","https://github.com/run-llama/llama_index/issues/9957","https://github.com/pypa/advisory-database/tree/main/vulns/llama-index/PYSEC-2024-12.yaml","https://github.com/run-llama/llama_index"],"severity":{"label":"critical","score":9.8},"sources":[{"source":"osv","source_id":"GHSA-2jxw-4hm4-6w87","url":"https://osv.dev/vulnerability/GHSA-2jxw-4hm4-6w87"}],"summary":"SQL injection in llama-index"}