CVE-2024-23751
9.8
CRITICAL
LlamaIndex (aka llama_index) through 0.9.34 allows SQL injection via the Text-to-SQL feature in NLSQLTableQueryEngine, SQLTableRetrieverQueryEngine, NLSQLRetriever, RetrieverQueryEngine, and PGVectorS...
Published: 2024-01-22
Products: 1
Vendors:
llamaindex
llamaindex
CVE-2024-14021
7.8
HIGH
LlamaIndex (run-llama/llama_index) versions up to and including 0.11.6 contain an unsafe deserialization vulnerability in BGEM3Index.load_from_disk() in llama_index/indices/managed/bge_m3/base.py. The...
Published: 2026-01-12
Products: 1
Vendors:
llamaindex
llamaindex
CVE-2024-58339
7.5
HIGH
LlamaIndex (run-llama/llama_index) versions up to and including 0.12.2 contain an uncontrolled resource consumption vulnerability in the VannaPack VannaQueryEngine implementation. The custom_query() l...
Published: 2026-01-12
Products: 1
Vendors:
llamaindex
llamaindex