| Package | Affected versions | Patched versions |
|---|---|---|
| ragas | ≥ 0.2.3, < 0.3.0-rc1 | 0.3.0-rc1 |
| ragas | ≥ 0.2.3, ≤ 0.2.14 |
An Arbitrary File Read vulnerability exists in the ImageTextPromptValue class in Exploding Gradients RAGAS v0.2.3 to v0.2.14. The vulnerability stems from improper validation and sanitization of URLs supplied in the retrieved_contexts parameter when handling multimodal inputs.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free