Guardrails
Approved changes feed: RSS · Atom
cpe:2.3:a:guardrailsai:guardrails:*:*:*:*:*:*:*:*
part: a version: * update: *
| Vendor | Guardrailsai (c6547629-c375-5ea2-a367-dfa0069e86f5) |
|---|---|
| Product | Guardrails (75391fcc-92ef-57f3-bdf7-18ba241bd3ec) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | * |
| Target hardware | * |
| Other | * |
| Notes | Imported from gcve-enriched-dumps CVE data |
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
| No PURL mappings for this CPE yet. | ||
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2024-6961 |
vulnerable | 2026-06-08 06:58:20.842038 |
XXE in Guardrails AI when consuming RAIL documents
MEDIUM (5.9)
RAIL documents are an XML-based format invented by Guardrails AI to enforce formatting checks on LLM outputs. Guardrails users that consume RAIL documents from external sources are vulnerable to XXE, which may cause leakage of internal file data via the SYSTEM entity.
Published: 2024-07-21T10:49:54.782Z
Updated: 2024-11-25T12:48:07.911Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2024-45858 |
vulnerable | 2026-06-08 06:48:09.829261 |
Details available
HIGH (7.8)
An arbitrary code execution vulnerability exists in versions 0.2.9 up to 0.5.10 of the Guardrails AI Guardrails framework because of the way it validates XML files. If a victim user loads a maliciously crafted XML file containing Python code, the code will be passed to an eval function, causing it to execute on the user's machine.
Published: 2024-09-18T15:02:17.891Z
Updated: 2024-09-18T17:45:44.580Z |
Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.