llamaindex llamaindex

Name: llamaindex llamaindex
Brand: llamaindex

productUS

cpe:2.3:a:llamaindex:llamaindex:*:*:*:*:*:*:*:*

A product tracked in the threat graph; the vulnerabilities below are known to affect it.

KEV-listed

public exploit

EPSS ≥ 10%

by severity

2critical4high1medium0low

updated 2026-10-28

vulnerabilities (24)

Related CVEs.

sort

ID	severity	EPSS	exploitable	patched	published	affected
CVE-2024-3271US	—	2.89% (87th)	—	0.10.26	2024-04-16	0.10.6 → 0.10.26
CVE-2024-4181US	—	2.14% (82nd)	—	0.10.13	2024-05-16	0.9.47 → 0.10.13
CVE-2024-12909US	critical9.8	1.44% (73rd)	—	0.3.0	2025-03-20	< 0.3.0
CVE-2024-11958US	—	1.44% (73rd)	—	0.4.0	2025-03-20	< 0.4.0
CVE-2025-1753US	—	1.14% (67th)	—	no fix	2025-05-28	= 0.12.20
CVE-2024-12704US	—	0.83% (57th)	—	no fix	2025-03-20	= 0.12.5
CVE-2025-1750US	—	0.82% (57th)	—	0.12.21	2025-06-02	0.12.19 → 0.12.21
CVE-2024-12910US	medium5.9	0.70% (53rd)	—	0.12.9	2025-03-20	< 0.12.9
CVE-2025-1793US	—	0.66% (51st)	—	0.12.28	2025-06-05	0.12.21 → 0.12.28
CVE-2024-23751US	critical9.8	0.66% (51st)	—	no fix	2024-01-22	≤ 0.9.34
CVE-2024-58339US	high7.5	0.65% (51st)	—	no fix	2026-01-12	≤ 0.12.2
CVE-2025-3046US	—	0.64% (50th)	—	0.12.28	2025-07-07	0.12.23 → 0.12.28
CVE-2025-6209US	—	0.62% (50th)	—	0.12.41	2025-07-07	0.12.27 → 0.12.41
CVE-2024-45201US	—	0.53% (45th)	—	0.10.38	2024-08-22	< 0.10.38
CVE-2024-12911US	—	0.52% (44th)	—	0.5.1	2025-03-20	< 0.5.1
CVE-2025-1752US	—	0.52% (44th)	—	0.3.6	2025-05-10	< 0.3.6
CVE-2025-3108US	high7.5	0.50% (43rd)	—	0.12.41	2025-07-06	0.12.27 → 0.12.41
CVE-2025-3225US	—	0.48% (41st)	—	0.12.29	2025-07-07	0.12.21 → 0.12.29
CVE-2025-5472US	—	0.39% (33rd)	—	0.12.38	2025-07-07	0.12.28 → 0.12.38
CVE-2025-6211US	—	0.36% (30th)	—	0.3.1	2025-07-10	< 0.3.1
CVE-2024-14021US	high7.8	0.34% (27th)	—	no fix	2026-01-12	≤ 0.11.6
CVE-2025-6210US	—	0.33% (27th)	—	0.5.2	2025-07-07	< 0.5.2
CVE-2025-3044US	—	0.32% (25th)	—	0.12.28	2025-07-07	< 0.12.28
CVE-2025-7707US	high7.8	0.19% (8th)	—	0.13.0	2025-10-13	0.12.33 → 0.13.0

weaknesses (8)

The flaw types (CWEs) most of these CVEs share.

CWE-89Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')6 CVEs
CWE-22Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')3 CVEs
CWE-674Uncontrolled Recursion3 CVEs
CWE-400Uncontrolled Resource Consumption2 CVEs
CWE-440Expected Behavior Violation2 CVEs
CWE-94Improper Control of Generation of Code ('Code Injection')2 CVEs
CWE-1112Incomplete Documentation of Program Execution1 CVEs
CWE-29Path Traversal: '\..\filename'1 CVEs

sources (1)

Which sources assert this record, and when.

USNVD / CVE24 CVEs

scry

Products carry known vulnerabilities once they are exposed to the internet. See what is exposed on your perimeter with a free passive scan.

Free scan