Llamaindex vulnerabilities

1 known vulnerability in Llamaindex from Llamaindex Project. 1 is rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.

Latest first

• 9.8 Critical severity

  Llamaindex: Improper Neutralization of Special Elements in Output Used by a Downstream Component

  CVE-2023-39662Aug 15, 2023Llamaindex ProjectEPSS 1.49%

  An issue in llama_index v.0.7.13 and before allows a remote attacker to execute arbitrary code via the `exec` parameter in PandasQueryEngine function.