{"action":"Upgrade llama-index-core to 0.10.38 or later.","affected":[{"fixed":"0.10.38","introduced":"0"}],"component":"llama-index-core","cve_ids":["CVE-2024-45201"],"ecosystem":"PyPI","epss":0.00533,"exploited":false,"fixed_versions":["0.10.38"],"ghsa_id":"GHSA-fxc2-8m62-m85x","id":"tcs_01M5KH8SKSKQJ5N7F63HNGHAM3","modified_at":"2026-07-01T20:22:56.474948Z","published_at":"2026-06-29T11:50:41.215936Z","references":["https://osv.dev/vulnerability/PYSEC-2026-395","https://nvd.nist.gov/vuln/detail/CVE-2024-45201","https://github.com/run-llama/llama_index/pull/13523","https://github.com/run-llama/llama_index/commit/bd827c30484fa085ec769fa55dc7f2add8006ac8","https://github.com/pypa/advisory-database/tree/main/vulns/llama-index/PYSEC-2024-192.yaml","https://github.com/run-llama/llama_index","https://github.com/run-llama/llama_index/compare/v0.10.37...v0.10.38","https://pypi.org/project/llama-index-core","https://github.com/advisories/GHSA-fxc2-8m62-m85x"],"severity":{"label":"critical","score":9.8},"sources":[{"source":"osv","source_id":"PYSEC-2026-395","url":"https://osv.dev/vulnerability/PYSEC-2026-395"}],"summary":"LlamaIndex includes an exec call for `import {cls_name}`"}