AdvisoriesToolsStatsChecklistSubmitGet the email
← All advisories
CVE-2024-45201criticalCode execution2024-08-22

CVE-2024-45201: LlamaIndex includes an exec call for `import {cls_name}`

An issue was discovered in llama_index before 0.10.38. download/integration.py includes an exec call for import {cls_name}.

01.

What it is

An issue was discovered in llama_index before 0.10.38. download/integration.py includes an exec call for import {cls_name}.

02.

How to check

  1. Affected: llama-index-core (pip) < 0.10.38.
  2. Compare your installed version with the range above (command below).
03.

How to fix

  1. Upgrade llama-index-core to 0.10.38 or later.
pip show llama-index-core | grep Version
04.

Sources

More advisories for this tool
The weekly email

One email a week. Only what changed.

New advisories, CVEs and fixes for Lovable, Bolt, v0, Replit, Base44 and Cursor apps. No roundups of things you already read.

Free. The list is new, so the first issues go out once there are readers. Unsubscribe from any email in one click. We never sell or share addresses.