python313Packages.llama-index-vector-stores-qdrant
Security Advisories for python313Packages.llama-index-vector-stores-qdrant in nixpkgs
Potential
Potential
Potential
High
11 months ago
LlamaIndex affected by a Denial of Service (DOS) in JSONReader
pypi
llama-index-core
Potential
Moderate
about 1 year ago
LlamaIndex vulnerable to data loss through hash collisions in its DocugamiReader class
pypi
llama-index-readers-docugami, llama-index
Potential
High
about 1 year ago
LlamaIndex vulnerable to Path Traversal attack through its encode_image function
pypi
llama-index-core
Potential
Moderate
about 1 year ago
LlamaIndex vulnerable to DoS attack through uncontrolled recursive JSON parsing
pypi
llama-index-core
Potential
Moderate
about 1 year ago
LlamaIndex vulnerability in its ObsidianReader class can lead to Path Traversal exploit
pypi
llama-index-readers-obsidian
Potential
High
about 1 year ago
LlamaIndex is vulnerable to Path Traversal attack through its ObsidianReader class
pypi
llama-index-readers-obsidian
Potential
Moderate
about 1 year ago
LlamaIndex vulnerability in ArxivReader class can cause MD5 hash collisions
pypi
llama-index-readers-papers
Potential
High
about 1 year ago
LlamaIndex has an XML Entity Expansion vulnerability in its sitemap parser
pypi
llama-index-readers-papers
Potential
Moderate
about 1 year ago
LlamaIndex has Incomplete Documentation of Program Execution related to JsonPickleSerializer component
pypi
llama-index-core
Potential
Potential
Potential
Potential
Critical
over 1 year ago
llama-index-packs-finchat SQL Injection vulnerability
pypi
llama-index-packs-finchat
Potential
High
over 1 year ago
LlamaIndex vulnerable to Creation of Temporary File in Directory with Insecure Permissions
pypi
llama-index
Potential
Moderate
over 1 year ago
LlamaIndex Uncontrolled Resource Consumption vulnerability
pypi
llama-index
Potential
High
over 1 year ago
LlamaIndex Improper Handling of Exceptional Conditions vulnerability
pypi
llama-index-core
Potential
Critical
over 1 year ago
LlamaIndex Retrievers Integration: DuckDBRetriever SQL Injection
pypi
llama-index-retrievers-duckdb-retriever
Potential
Critical
almost 2 years ago
LlamaIndex includes an exec call for `import {cls_name}`
pypi
llama-index-core
Potential
High
about 2 years ago
RunGptLLM class in LlamaIndex has a command injection
pypi
llama-index-llms-rungpt, llama-index
Potential
Potential
Critical
over 2 years ago
llama-index-core Prompt Injection vulnerability leading to Arbitrary Code Execution
pypi
llama-index-core
Potential