Llamaindex Project vulnerabilities
We track 1 vulnerability in Llamaindex Project products. 1 is rated high or critical, and none are known to be exploited. The most recent was published on August 15, 2023.
1vulnerabilities
1critical
0high
0exploited
9.8average CVSS score
Latest Llamaindex Project vulnerabilities
- 9.8 Critical severity
Llamaindex: Improper Neutralization of Special Elements in Output Used by a Downstream Component
An issue in llama_index v.0.7.13 and before allows a remote attacker to execute arbitrary code via the `exec` parameter in PandasQueryEngine function.