VYPR

PyPI package

llama-index-llms-rungpt

pkg:pypi/llama-index-llms-rungpt

Vulnerabilities (1)

  • CVE-2024-4181May 16, 2024
    affected < 0.1.3fixed 0.1.3

    A command injection vulnerability exists in the RunGptLLM class of the llama_index library, version 0.9.47, used by the RunGpt framework from JinaAI to connect to Language Learning Models (LLMs). The vulnerability arises from the improper use of the eval function, allowing a mali