https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-02T10:02:34.210640+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/euvd-2026-186291 EUVD-2026-186291 2026-10-02T10:02:34.213190+00:00 EUVD-2026-186291 https://cve.radiocsirt.org/vuln/fkie_cve-2024-45858 fkie_cve-2024-45858 2026-10-02T10:02:34.213219+00:00

An arbitrary code execution vulnerability exists in versions 0.2.9 up to 0.5.10 of the Guardrails AI Guardrails framework because of the way it validates XML files. If a victim user loads a maliciously crafted XML file containing Python code, the code will be passed to an eval function, causing it to execute on the user's machine.

 https://cve.radiocsirt.org/vuln/ghsa-w392-75q8-vr67 GHSA-w392-75q8-vr67 — Guardrails has an arbitrary code execution vulnerability 2026-10-02T10:02:34.213250+00:00

Affected: PyPI: guardrails-ai

An arbitrary code execution vulnerability exists in versions 0.2.9 up to 0.5.10 of the Guardrails AI Guardrails framework because of the way it validates XML files. If a victim user loads a maliciously crafted XML file containing Python code, the code will be passed to an eval function, causing it to execute on the user's machine.

 https://cve.radiocsirt.org/vuln/pysec-2026-1432 PYSEC-2026-1432 — Guardrails has an arbitrary code execution vulnerability 2026-10-02T10:02:34.213275+00:00

Affected: PyPI: guardrails-ai

An arbitrary code execution vulnerability exists in versions 0.2.9 up to 0.5.10 of the Guardrails AI Guardrails framework because of the way it validates XML files. If a victim user loads a maliciously crafted XML file containing Python code, the code will be passed to an eval function, causing it to execute on the user's machine.