치명취약점
llama_index vulnerable to SQL Injection
GHSA-v3c8-3pr6-gr7p · CVE-2025-1793 · PYSEC-2026-394 · 갱신 2026. 9. 10.
영향 받는 패키지
| 생태계 | 패키지 | 수정 버전 |
|---|---|---|
| PyPI | llama-index | 0.12.28 |
원문
출처
- ADVISORYhttps://nvd.nist.gov/vuln/detail/CVE-2025-1793
- WEBhttps://github.com/run-llama/llama_index/commit/0008041e8dde8e519621388e5d6f558bde6ef42e
- ADVISORYhttps://github.com/advisories/GHSA-v3c8-3pr6-gr7p
- WEBhttps://github.com/pypa/advisory-database/tree/main/vulns/llama-index/PYSEC-2026-394.yaml
- PACKAGEhttps://github.com/run-llama/llama_index
- WEBhttps://huntr.com/bounties/8cb1555a-9655-4122-b0d6-60059e79183c
- WEBhttps://pypi.org/project/llama-index