Threats tagged 'ghsa-6mcc-q3mg-3qg6'

1 threat

Severity	CVSS	Signals	Threat	Source	Published	Score and star
Critical	9.8	EPSS 0.8%	CVE-2025-1750run-llama/llama_index · SQL Injection Critical9.8EPSS 0.8%2025-06-02CVE Database V5CVE-2025-1750 CVE-2025-1750 is a critical SQL injection vulnerability in the delete function of DuckDBVectorStore within run-llama/llama_index version 0.12.19. It allows attackers to manipulate the ref_doc_id parameter to perform unauthorized read and write operations on server files, potentially leading to remote code execution. EPSS 0.8%Vulnerability CWE-89 #ghsa-6mcc-q3mg-3qg6 #pypi	CVE Database V5	2025-06-02

Page 1 of 1