Guardrails AI vulnerable to Improper Restriction of XML External Entity Reference

概要

参考情報

• nvd.nist.gov/vuln/detail/CVE-2024-6961 · ADVISORY
• guardrails-ai/guardrails#922 · WEB
• guardrails-ai/guardrails commit f3d806a · WEB
• guardrails-ai/guardrails · PACKAGE
• research.jfrog.com/vulnerabilities/guardrails-rail-xxe-jfsa-2024-001035519 · WEB
• research.jfrog.com/vulnerabilities/guardrails-rail-xxe-jfsa-2024-001035519
• pypi.org/project/guardrails-ai · PACKAGE
• GitHub Advisory GHSA-f8hx-f4xw-c646 · ADVISORY

guardrails-ai のその他の脆弱性

• CVE-2026-45758緊急 9.6Guardrails AI is a Python framework that helps build AI applications. On May 11, 2026 at approximately 6:00 PM Pacific, an attacker publishe…
• CVE-2026-31233緊急 9.8Guardrails AI thru 0.6.7 contains a code injection vulnerability (CWE-94) in its Hub package installation mechanism. When installing validat…
• CVE-2024-45858高 7.8An arbitrary code execution vulnerability exists in versions 0.2.9 up to 0.5.10 of the Guardrails AI Guardrails framework because of the way…