{"action":"Upgrade llama-index-core to 0.10.38 or later.","affected":[{"fixed":"0.10.38","introduced":"0"}],"component":"llama-index-core","cve_ids":["CVE-2024-45201"],"ecosystem":"PyPI","epss":0.00533,"exploited":false,"fixed_versions":["0.10.38"],"ghsa_id":"GHSA-fxc2-8m62-m85x","id":"tcs_01M5KFGARDWE2PE6C1ZTHF2THE","modified_at":"2026-06-29T12:26:26.008969714Z","published_at":"2024-08-22T21:31:29Z","references":["https://osv.dev/vulnerability/GHSA-fxc2-8m62-m85x","https://nvd.nist.gov/vuln/detail/CVE-2024-45201","https://github.com/run-llama/llama_index/pull/13523","https://github.com/run-llama/llama_index/commit/bd827c30484fa085ec769fa55dc7f2add8006ac8","https://github.com/pypa/advisory-database/tree/main/vulns/llama-index/PYSEC-2024-192.yaml","https://github.com/run-llama/llama_index","https://github.com/run-llama/llama_index/compare/v0.10.37...v0.10.38"],"severity":{"label":"critical","score":9.8},"sources":[{"source":"osv","source_id":"GHSA-fxc2-8m62-m85x","url":"https://osv.dev/vulnerability/GHSA-fxc2-8m62-m85x"}],"summary":"LlamaIndex includes an exec call for `import {cls_name}`"}