CVE-2024-45201criticalCode execution2024-08-22
CVE-2024-45201: LlamaIndex includes an exec call for `import {cls_name}`
An issue was discovered in llama_index before 0.10.38. download/integration.py includes an exec call for import {cls_name}.
What it is
An issue was discovered in llama_index before 0.10.38. download/integration.py includes an exec call for import {cls_name}.
How to check
- Affected: llama-index-core (pip) < 0.10.38.
- Compare your installed version with the range above (command below).
How to fix
- Upgrade llama-index-core to 0.10.38 or later.
pip show llama-index-core | grep VersionSources
More advisories for this tool