MEDIUM5.9PyPI
GHSA-f8hx-f4xw-c646· CVE-2024-6961, PYSEC-2026-1431Guardrails AI vulnerable to Improper Restriction of XML External Entity Reference
Modified: 7/7/2026
package
PyPI/guardrails-ai
pkg:pypi/guardrails-ai
HIGHSlopsquatting risk: highPyPI
VDB-SLOP-pypi-6ed140d53eSlopsquatting candidate: guardrails-ai (PyPI)
Modified: 6/3/2026
CRITICAL9.8PyPI
GHSA-r6hf-g5x6-7pv9· CVE-2026-31233, PYSEC-2026-347Guardrails AI contains a code injection vulnerability in its Hub package installation mechanism
Modified: 9/10/2026
HIGH8.8PyPI
GHSA-w392-75q8-vr67· CVE-2024-45858, PYSEC-2026-1432Guardrails has an arbitrary code execution vulnerability
Modified: 7/7/2026
CRITICAL9.6PyPI
GHSA-xmpw-2vmm-p4p6· CVE-2026-45758, PYSEC-2026-206Malicious code in guardrails-ai 0.10.1 (supply chain compromise)
Modified: 6/9/2026
—PyPI
MAL-2026-3607Malicious code in guardrails-ai (PyPI)
Modified: 5/12/2026
MEDIUM5.9PyPI
PYSEC-2026-1431· CVE-2024-6961, GHSA-f8hx-f4xw-c646Guardrails AI vulnerable to Improper Restriction of XML External Entity Reference
Modified: 7/7/2026
HIGH8.8PyPI
PYSEC-2026-1432· CVE-2024-45858, GHSA-w392-75q8-vr67Guardrails has an arbitrary code execution vulnerability
Modified: 7/7/2026
CRITICAL9.6PyPI
PYSEC-2026-206· CVE-2026-45758, GHSA-xmpw-2vmm-p4p6Modified: 6/9/2026
CRITICAL9.8PyPI
PYSEC-2026-347· CVE-2026-31233, GHSA-r6hf-g5x6-7pv9Guardrails AI contains a code injection vulnerability in its Hub package installation mechanism
Modified: 7/1/2026