{"action":"Upgrade llama-index-core to 0.12.38 or later.","affected":[{"fixed":"0.12.38","introduced":"0"}],"component":"llama-index-core","cve_ids":["CVE-2025-5302"],"ecosystem":"PyPI","epss":0.00285,"exploited":false,"fixed_versions":["0.12.38"],"ghsa_id":"GHSA-7753-xrfw-ch36","id":"tcs_01M5KF57JB4QS2GARGRYPBB2QD","modified_at":"2026-07-07T17:56:52.377276279Z","published_at":"2025-08-26T00:31:13Z","references":["https://osv.dev/vulnerability/GHSA-7753-xrfw-ch36","https://nvd.nist.gov/vuln/detail/CVE-2025-5302","https://github.com/run-llama/llama_index/commit/c032843a02ce38fd8f284b2aa5a37fd1c17ae635","https://github.com/run-llama/llama_index","https://huntr.com/bounties/70041b81-de9e-4046-8c0e-6ccd557048a6"],"severity":{"label":"high","score":8.6},"sources":[{"source":"osv","source_id":"GHSA-7753-xrfw-ch36","url":"https://osv.dev/vulnerability/GHSA-7753-xrfw-ch36"}],"summary":"LlamaIndex affected by a Denial of Service (DOS) in JSONReader"}