Advisoriesby IbisLlamaIndexPYSEC-2025-250
LlamaIndex: denial of service
Fix: upgrade to 0.12.29 or later
An XML Entity Expansion vulnerability, also known as a 'billion laughs' attack, exists in the sitemap parser of the run-llama/llama_index repository, specifically affecting version v0.12.21. This vulnerability allows an attacker to supply a malicious Sitemap XML, leading to a Denial of Service (DoS) by exhausting system memory and potentially causing a system crash. The issue is resolved in version v0.12.29.
Affected versions
| Package | Affected | Fixed in |
|---|---|---|
| llama-index PyPI | >= 0.12.21, < 0.12.29 | 0.12.29 |
Details and references
- CVSS 3.0
- CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
- Severity from
- the CVSS score
- Also known as
- CVE-2025-3225, GHSA-w42r-mrx7-c633, PYSEC-2026-1570
More LlamaIndex advisories
All LlamaIndex
LlamaIndex vulnerable to Path Traversal attack through its encode_image functionCVE-2025-6209fixed in 0.12.41LlamaIndex vulnerable to DoS attack through uncontrolled recursive JSON parsingCVE-2025-5472fixed in 0.12.38LlamaIndex: path traversalCVE-2025-6210fixed in 0.5.2A vulnerability in the ArxivReader class of the run-llama/llama_index repositoryCVE-2025-3044fixed in 0.12.28LlamaIndex: arbitrary file readCVE-2025-3046fixed in 0.12.28LlamaIndex has Incomplete Documentation of Program Execution related to JsonPickleSerializer componentCVE-2025-3108fixed in 0.12.41