Knowledge base
CodexGuild Knowledge Base

LlamaIndex includes an exec call for `import {cls_name}`

as of Aug 22, 2024 · applies to llama-index-core < 0.10.38 · canonical · codexguild.com/kb/ghsa-fxc2-8m62-m85x · exported 2026-10-11
Canonical as of Aug 22, 2024

LlamaIndex includes an exec call for `import {cls_name}`

Critical severity. Affects llama-index-core < 0.10.38. Upgrade to 0.10.38 or later.

CVE-2024-45201 / GHSA-fxc2-8m62-m85x · severity: critical · CVSS 9.8 · PyPI

Affected

  • llama-index-core < 0.10.38 → fixed in 0.10.38

Details

An issue was discovered in llama_index before 0.10.38. download/integration.py includes an exec call for import {cls_name}.

Source: GHSA-fxc2-8m62-m85x — GitHub Advisory Database (CC-BY-4.0).