{"action":"Upgrade llama-index to 0.12.28 or later.","affected":[{"fixed":"0.12.28","introduced":"0"}],"component":"llama-index","cve_ids":["CVE-2025-1793"],"ecosystem":"PyPI","epss":0.00691,"exploited":false,"fixed_versions":["0.12.28"],"ghsa_id":"GHSA-v3c8-3pr6-gr7p","id":"tcs_01M5KH8QG8QW53FXD7QKR6NP0B","modified_at":"2026-07-01T20:22:56.586862Z","published_at":"2026-06-29T11:50:38.482622Z","references":["https://osv.dev/vulnerability/PYSEC-2026-394","https://nvd.nist.gov/vuln/detail/CVE-2025-1793","https://github.com/run-llama/llama_index/commit/0008041e8dde8e519621388e5d6f558bde6ef42e","https://github.com/run-llama/llama_index","https://huntr.com/bounties/8cb1555a-9655-4122-b0d6-60059e79183c","https://pypi.org/project/llama-index","https://github.com/advisories/GHSA-v3c8-3pr6-gr7p"],"severity":{"label":"critical","score":9.8},"sources":[{"source":"osv","source_id":"PYSEC-2026-394","url":"https://osv.dev/vulnerability/PYSEC-2026-394"}],"summary":"llama_index vulnerable to SQL Injection"}