{"action":"No fix published. Pin and monitor.","affected":[],"component":"guardrails-ai","cve_ids":["CVE-2026-45758"],"ecosystem":"PyPI","epss":0.00276,"exploited":false,"fixed_versions":[],"ghsa_id":"GHSA-xmpw-2vmm-p4p6","id":"tcs_01M5KG4DWKNQZ5NSXNA07JBRM8","modified_at":"2026-06-09T13:30:23.020333099Z","published_at":"2026-05-19T15:40:44Z","references":["https://osv.dev/vulnerability/GHSA-xmpw-2vmm-p4p6","https://github.com/guardrails-ai/guardrails/security/advisories/GHSA-xmpw-2vmm-p4p6","https://nvd.nist.gov/vuln/detail/CVE-2026-45758","https://github.com/guardrails-ai/guardrails/issues/1473","https://github.com/guardrails-ai/guardrails","https://github.com/guardrails-ai/guardrails/blob/main/SECURITY_ADVISORY.md","https://github.com/pypa/advisory-database/tree/main/vulns/guardrails-ai/PYSEC-2026-206.yaml"],"severity":{"label":"critical","score":9.6},"sources":[{"source":"osv","source_id":"GHSA-xmpw-2vmm-p4p6","url":"https://osv.dev/vulnerability/GHSA-xmpw-2vmm-p4p6"}],"summary":"Malicious code in guardrails-ai 0.10.1 (supply chain compromise)"}