Skip to main content

Uncontrolled Recursion

CVE-2025-5302

High
7.6/10

Summary

A Denial Of Service (DoS) vulnerability exists in the JSONReader component of the "run-llama/llama_index", specifically in versions through v0.12.37. The vulnerability is caused by uncontrolled recursion when parsing deeply nested JSON files, which can lead to Python hitting its maximum recursion depth limit. This results in high resource consumption and potential crashes of the Python process.

  • LOW
  • ADJACENT NETWORK
  • LOW
  • UNCHANGED
  • NONE
  • NONE
  • LOW
  • HIGH

CWE-674 - Uncontrolled Recursion

The product does not properly control the amount of recursion which takes place, consuming excessive resources, such as allocated memory or the program stack.

References

Advisory Timeline

  • Published