CVE-2025-3225
High
Description
An XML Entity Expansion vulnerability, also known as a 'billion laughs' attack, exists in the sitemap parser of the run-llama/llama_index repository, specifically affecting version v0.12.21. This vulnerability allows an attacker to supply a malicious Sitemap XML, leading to a Denial of Service (DoS) by exhausting system memory and potentially causing a system crash. The issue is resolved in version v0.12.29.
SeverityHigh
CVSS7.5
Exploit probability—
ProductLlamaindex
PublishedJul 7, 2025
First seenJul 7, 2025
Weakness typeCWE-776CWE-776
How to fix
Update
- llamaindex llamaindex0.12.29 or later
- llama-index-readers-papers0.3.2 or later
- llama-index0.12.29 or later
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| llamaindex llamaindex | 0.12.21 ≤ v < 0.12.29 | 0.12.29 |
| llama-index-readers-papersPyPI | v < 0.3.2 | 0.3.2 |
| llama-indexPyPI | 0.12.21 ≤ v < 0.12.29 | 0.12.29 |
Check your version
Choose the product and enter the version you run to see whether it falls in the affected range.
In the Intelligence 360 plan
Attack Surface Management
See the assets tied to your domains, the technologies they run and known vulnerabilities in one list.