치명취약점
LlamaIndex includes an exec call for `import {cls_name}`
GHSA-fxc2-8m62-m85x · CVE-2024-45201 · PYSEC-2024-192 · PYSEC-2026-395 · 갱신 2026. 6. 29.
영향 받는 패키지
| 생태계 | 패키지 | 수정 버전 |
|---|---|---|
| PyPI | llama-index-core | 0.10.38 |
원문
출처
- ADVISORYhttps://nvd.nist.gov/vuln/detail/CVE-2024-45201
- WEBhttps://github.com/run-llama/llama_index/pull/13523
- WEBhttps://github.com/run-llama/llama_index/commit/bd827c30484fa085ec769fa55dc7f2add8006ac8
- WEBhttps://github.com/pypa/advisory-database/tree/main/vulns/llama-index/PYSEC-2024-192.yaml
- PACKAGEhttps://github.com/run-llama/llama_index
- WEBhttps://github.com/run-llama/llama_index/compare/v0.10.37...v0.10.38