TI-2026-33495 CVE-2026-45758 · GHSA-xmpw-2vmm-p4p6
Malicious code in guardrails-ai 0.10.1 (supply chain compromise)
Priority MEDIUM 43
Guardrails AI is a Python framework that helps build AI applications.
Vulnerabilities
3 records
TI-2026-33119 CVE-2026-45321 · GHSA-g7cv-rxg3-hmpx
Malware in 42 @tanstack/* packages exfiltrates cloud credentials, GitHub tokens, and SSH keys
Priority CRITICAL 100KEV
On 2026-05-11, between approximately 19:20 and 19:26 UTC, 84 malicious versions across 42 @tanstack/* packages were published to the npm registry.
TI-2024-30814 CVE-2024-45858 · GHSA-w392-75q8-vr67
An arbitrary code execution vulnerability exists in versions 0.2.9 up to 0.5.10 of the…
Priority HIGH 69
An arbitrary code execution vulnerability exists in versions 0.2.9 up to 0.5.10 of the Guardrails AI Guardrails framework because of the way it validates XML files.