CNNVD-202507-668 Information
Jul 07, 2025
cve
CNNVD ID
CNNVD-202507-668
Related CVE
- CNNVD Published: 2025-07-07
Description (Chinese)
LlamaIndex是LlamaIndex开源的一个 LLM 应用程序的数据框架。 LlamaIndex 0.12.28版本存在安全漏洞，该漏洞源于JSONReader中递归解析不受控制，可能导致拒绝服务攻击。
Description (English)
LlamaIndex is a data frame for an LLM application that is an open source for LlamaIndex. The LlamaIndex 0.12.28 version has a security loophole, which stems from the uncontrolled recalcitrant in JSONReader and could lead to a denial of service attack.
Hazard Level
High
Vulnerability Type
其他
Affected Vendor
LlamaIndex
Published
2025-07-07
Last Modified
2026-02-24
References
https://github.com/run-llama/llama_index/commit/c032843a02ce38fd8f284b2aa5a37fd1c17ae635 https://huntr.com/bounties/df187bda-7911-4823-a19a-e15b2c66b0d4 https://access.redhat.com/security/cve/cve-2025-5472
Patch
https://github.com/run-llama/llama_index/releases
Share on: