CVE-2024-6961
2 advisories.
PyPI/guardrails-ai CVE-2024-6961: medium 5.9, EPSS 0.41%
Guardrails AI vulnerable to Improper Restriction of XML External Entity Reference
Action: Upgrade guardrails-ai to 0.5.0 or later.
pip install guardrails-ai==0.5.0Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | 0.5.0 | - |
Fixed versions
| 0.5.0 |
Sources
- osv: GHSA-f8hx-f4xw-c646
- https://nvd.nist.gov/vuln/detail/CVE-2024-6961
- https://github.com/guardrails-ai/guardrails/pull/922
- https://github.com/guardrails-ai/guardrails/commit/f3d806afee31e2e3f97af682d16c3c1bc0d3c380
- https://github.com/guardrails-ai/guardrails
- https://research.jfrog.com/vulnerabilities/guardrails-rail-xxe-jfsa-2024-001035519
CVE-2024-6961 · published · modified · JSON
PyPI/guardrails-ai CVE-2024-6961: medium 5.9, EPSS 0.41%
Guardrails AI vulnerable to Improper Restriction of XML External Entity Reference
Action: Upgrade guardrails-ai to 0.5.0 or later.
pip install guardrails-ai==0.5.0Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | 0.5.0 | - |
Fixed versions
| 0.5.0 |
Sources
- osv: PYSEC-2026-1431
- https://nvd.nist.gov/vuln/detail/CVE-2024-6961
- https://github.com/guardrails-ai/guardrails/pull/922
- https://github.com/guardrails-ai/guardrails/commit/f3d806afee31e2e3f97af682d16c3c1bc0d3c380
- https://github.com/guardrails-ai/guardrails
- https://research.jfrog.com/vulnerabilities/guardrails-rail-xxe-jfsa-2024-001035519
- https://pypi.org/project/guardrails-ai
- https://github.com/advisories/GHSA-f8hx-f4xw-c646
CVE-2024-6961 · published · modified · JSON