{
 "id": "AIR-2025-0329",
 "slug": "cve-2025-5302-llamaindex-denial-of-service-in-jsonreader",
 "title": "CVE-2025-5302: LlamaIndex Denial of Service in JSONReader",
 "summary": "A denial of service vulnerability exists in the JSONReader component of LlamaIndex due to uncontrolled recursion when parsing deeply nested JSON files. The issue can cause high resource consumption and process crashes, and has been patched in version 0.12.38.",
 "type": "attack_on_ai",
 "categories": [
  "infra_vuln"
 ],
 "severity": 2,
 "targets": [
  "framework_or_tooling"
 ],
 "products": [
  "LlamaIndex",
  "llama-index-core"
 ],
 "incident_date": "2025-08-26",
 "incident_date_precision": "day",
 "first_reported": "2025-08-26",
 "sources": [
  {
   "url": "https://github.com/advisories/GHSA-7753-xrfw-ch36",
   "publisher": "GitHub Advisory Database",
   "title": "CVE-2025-5302: LlamaIndex affected by a Denial of Service (DOS) in JSONReader",
   "published_at": "2025-08-26"
  }
 ],
 "source_count": 1,
 "confidence": 0.95,
 "status": "published",
 "origin": "seed_ghsa",
 "tags": [
  "CVE-2025-5302",
  "denial-of-service"
 ],
 "created_at": "2026-10-18T07:00:14.101Z",
 "updated_at": "2026-10-18T07:00:14.101Z"
}