guardrails-ai vulnerabilities
CVEs whose affected-version data names the guardrails-ai package (pip). Each record lists the affected and patched versions; check a specific version with the dependency checker or POST /api/sbom.
3 CVEsRSS
CVE-2026-31233Critical· 9.8Guardrails AI contains a code injection vulnerability in its Hub package installation mechanism
Guardrails AI contains a code injection vulnerability in its Hub package installation mechanism
▾ Midnightguardrails-ai · guardrails-aiEPSS 0.64%via OSV
CVE-2024-45858High· 8.8Guardrails has an arbitrary code execution vulnerability
Guardrails has an arbitrary code execution vulnerability
▾ Twilightguardrails-ai · guardrails-aiEPSS 0.38%via OSV
CVE-2024-6961Medium· 5.9Guardrails AI vulnerable to Improper Restriction of XML External Entity Reference
Guardrails AI vulnerable to Improper Restriction of XML External Entity Reference
▾ Sunlitguardrails-ai · guardrails-aiEPSS 0.41%via OSV