Free AI Safety Workshop — in collaboration with explainx.aiSave your seat
AgentbeamBeta
AI agent vulnerability · LlamaIndex

CVE-2024-45201: LlamaIndex includes an exec call for `import {cls_name}`

criticalCVSS 4.0 9.3 · 3.1 9.8GHSA-fxc2-8m62-m85x

An issue was discovered in llamaindex before 0.10.38. download/integration.py includes an exec call for import {clsname}.

Published Aug 22, 2024 · Updated Jan 21, 2025

Affected packages

llama-index-core

Ecosystem
PyPI
Affected
< 0.10.38
Fixed in
0.10.38
Check
pip show llama-index-core

Advisory details

From the GitHub Advisory Database (CC BY 4.0).

An issue was discovered in llama_index before 0.10.38. download/integration.py includes an exec call for import {cls_name}.

References

How this page is made: the data panel comes from the GitHub Advisory Database, CISA’s KEV catalog, the NVD and FIRST EPSS, and updates twice a day. No analysis has been written for this entry yet. Methodology

More LlamaIndex vulnerabilities

All LlamaIndex entries