PyPI llama-index

Name: PyPI llama-index
Brand: PyPI

productUS

pkg:pypi/llama-index

A product tracked in the threat graph; the vulnerabilities below are known to affect it.

KEV-listed

public exploit

EPSS ≥ 10%

by severity

2critical4high1medium0low

updated 2026-10-28

vulnerabilities (22)

Related CVEs.

sort

ID	severity	EPSS	exploitable	patched	published	affected
CVE-2024-4181US	—	2.14% (82nd)	—	0.10.13	2024-05-16	2 versions
CVE-2023-39662US	critical9.8	1.49% (74th)	—	0.7.14	2023-08-15	2 versions
CVE-2025-1753US	—	1.14% (67th)	—	no fix	2025-05-28	≤ 0.12.20
CVE-2024-12704US	—	0.83% (57th)	—	no fix	2025-03-20	≤ 0.12.5
CVE-2025-1750US	—	0.82% (57th)	—	0.12.21	2025-06-02	0.12.19 → 0.12.21
CVE-2024-12910US	medium5.9	0.70% (53rd)	—	0.12.9	2025-03-20	< 0.12.9
CVE-2025-1793US	—	0.66% (52nd)	—	0.12.28	2025-06-05	< 0.12.28
CVE-2024-23751US	critical9.8	0.66% (51st)	—	0.9.35	2024-01-22	2 versions
CVE-2024-58339US	high7.5	0.65% (51st)	—	0.12.3	2026-01-12	< 0.12.3
CVE-2025-3046US	—	0.64% (50th)	—	0.12.28	2025-07-07	0.12.23 → 0.12.28
CVE-2025-6209US	—	0.62% (50th)	—	0.12.41	2025-07-07	0.12.27 → 0.12.41
CVE-2024-45201US	—	0.53% (45th)	—	0.10.38	2024-08-22	< 0.10.38
CVE-2024-12911US	—	0.52% (44th)	—	0.12.3	2025-03-20	< 0.12.3
CVE-2025-1752US	—	0.52% (44th)	—	0.12.21	2025-05-10	0.12.15 → 0.12.21
CVE-2025-3108US	high7.5	0.50% (43rd)	—	0.12.41	2025-07-06	0.12.27 → 0.12.41
CVE-2025-3225US	—	0.48% (41st)	—	0.12.29	2025-07-07	0.12.21 → 0.12.29
CVE-2025-5472US	—	0.39% (33rd)	—	0.12.38	2025-07-07	0.12.28 → 0.12.38
CVE-2025-6211US	—	0.36% (30th)	—	0.12.41	2025-07-10	< 0.12.41
CVE-2024-14021US	high7.8	0.34% (27th)	—	0.11.7	2026-01-12	< 0.11.7
CVE-2025-6210US	—	0.33% (27th)	—	0.5.2	2025-07-07	< 0.5.2
CVE-2025-3044US	—	0.32% (25th)	—	0.12.28	2025-07-07	< 0.12.28
CVE-2025-7707US	high7.8	0.19% (8th)	—	0.13.0	2025-10-13	< 0.13.0

The flaw types (CWEs) most of these CVEs share.

CWE-89Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')4 CVEs
CWE-22Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')3 CVEs
CWE-674Uncontrolled Recursion3 CVEs
CWE-94Improper Control of Generation of Code ('Code Injection')3 CVEs
CWE-400Uncontrolled Resource Consumption2 CVEs
CWE-440Expected Behavior Violation2 CVEs
CWE-1112Incomplete Documentation of Program Execution1 CVEs
CWE-29Path Traversal: '\..\filename'1 CVEs

Which sources assert this record, and when.

scry

Products carry known vulnerabilities once they are exposed to the internet. See what is exposed on your perimeter with a free passive scan.