CVE-2025-1752: LlamaIndex Vulnerable to Denial of Service (DoS)

The vulnerability description explicitly names the KnowledgeBaseWebReader class and its get_article_urls function as the source of the DoS vulnerability due to improper handling of the max_depth parameter, leading to uncontrolled recursion. The provided commit 3c65db2947271de3bd1927dc66a044da385de4da directly addresses this issue by modifying the get_article_urls function. The patch introduces a depth parameter to track the current recursion level and adds a condition to stop recursion if depth reaches max_depth. This confirms that the get_article_urls function, prior to this patch, was the vulnerable function. The full namespace is derived from the file path and class structure typical in Python projects.