{"data":{"id":"91dc3aa6-189c-4438-932d-baa23dc5232a","title":"v0.14.26","summary":"The llama-index 0.14.26 release notes list version bumps across many integration packages, including llama-index-core. The notes say all integration uv.lock files were relocked for security, with lock files changed but no Python floor changes, and that requires-python was raised for security fixes across integrations, marked BREAKING. The core package also fixes a langchain-community deprecation that broke langchain bridge imports.","solution":"The source states the security relock of all integration uv.lock files (#24039) and the raised requires-python for security fixes across integrations (#24040), but it does not describe a mitigation or workaround for a specific vulnerability.","labels":["industry","security"],"sourceUrl":"https://github.com/run-llama/llama_index/releases/tag/v0.14.26","publishedAt":"2026-11-13T22:38:15.000Z","cveId":null,"cweIds":null,"cvssScore":null,"cvssSeverity":null,"severity":"info","attackType":[],"issueType":"news","affectedPackages":null,"affectedPackageNames":null,"affectedPackageRefs":null,"affectedVendors":["LlamaIndex"],"affectedVendorsRaw":["LlamaIndex","llama-index-core","llama-index-agent-agentmesh","langchain-community"],"classifierModel":"claude-haiku-5-5","classifierPromptVersion":"v4","summaryPromptVersion":"v2","headline":null,"headlinePromptVersion":null,"cvssVector":null,"attackVector":null,"attackComplexity":null,"privilegesRequired":null,"userInteraction":null,"exploitMaturity":null,"epssScore":null,"epssCheckedAt":null,"kevDateAdded":null,"advisoryAliases":null,"affectedPackagesSource":null,"affectedPackagesCheckedAt":null,"patchAvailable":null,"disclosureDate":"2026-11-13T22:38:15.000Z","fixReleasedAt":null,"daysToFix":null,"fixCheckedAt":null,"capecIds":null,"crossRefCount":0,"attackSophistication":"moderate","impactType":null,"aiComponentTargeted":"framework","llmSpecific":false,"classifierConfidence":0.8,"researchCategory":null,"atlasIds":null}}