Lucene search
+L

26 matches found

NVD
NVD
•added 2026/07/10 4:16 p.m.•39 views

CVE-2026-15143

A flaw was found in the filetype content detector of guardrails-detectors. This vulnerability allows a remote attacker to supply an arbitrary XML Schema Definition XSD string, which is processed without proper restrictions. This can lead to server-side requests to arbitrary URLs or local file...

9.3CVSS0.0053EPSS
SaveExploits0References3
osv_cve
osv_cve
•added 2026/07/10 3:25 p.m.•12 views

CVE-2026-15143 Guardrails-detectors: guardrails-detectors: ssrf and local file read via user-supplied xml schema (xml-with-schema:)

A flaw was found in the filetype content detector of guardrails-detectors. This vulnerability allows a remote attacker to supply an arbitrary XML Schema Definition XSD string, which is processed without proper restrictions. This can lead to server-side requests to arbitrary URLs or local file...

9.3CVSS6AI score
SaveExploits0References7
Vulnrichment
Vulnrichment
•added 2026/07/10 3:25 p.m.•29 views

CVE-2026-15143 Guardrails-detectors: guardrails-detectors: ssrf and local file read via user-supplied xml schema (xml-with-schema:)

A flaw was found in the filetype content detector of guardrails-detectors. This vulnerability allows a remote attacker to supply an arbitrary XML Schema Definition XSD string, which is processed without proper restrictions. This can lead to server-side requests to arbitrary URLs or local file...

9.3CVSS7.4AI score0.0053EPSS
SaveExploits0References3
Cvelist
Cvelist
•added 2026/07/10 3:25 p.m.•62 views

CVE-2026-15143 Guardrails-detectors: guardrails-detectors: ssrf and local file read via user-supplied xml schema (xml-with-schema:)

A flaw was found in the filetype content detector of guardrails-detectors. This vulnerability allows a remote attacker to supply an arbitrary XML Schema Definition XSD string, which is processed without proper restrictions. This can lead to server-side requests to arbitrary URLs or local file...

9.3CVSS0.0053EPSS
SaveExploits0References3
CVE
CVE
•added 2026/07/10 3:25 p.m.•57 views

CVE-2026-15143

CVE-2026-15143 affects guardrails-detectors' file_type content detector. An attacker can supply an arbitrary XML Schema (XSD) string, processed without proper restrictions, enabling server-side requests to arbitrary URLs or local file reads and risking disclosure of sensitive information.

9.3CVSS7.4AI score0.0053EPSS
SaveExploits0References3
RedhatCVE
RedhatCVE
•added 2026/07/10 3:20 p.m.•26 views

CVE-2026-15143

A flaw was found in the filetype content detector of guardrails-detectors. This vulnerability allows a remote attacker to supply an arbitrary XML Schema Definition XSD string, which is processed without proper restrictions. This can lead to server-side requests to arbitrary URLs or local file...

9.3CVSS7.4AI score0.0053EPSS
SaveExploits0References3
NVD
NVD
•added 2026/07/10 10:16 a.m.•31 views

CVE-2026-15378

A flaw was found in the guardrails-detectors component. This vulnerability allows a remote attacker to perform a blind Server-Side Request Forgery SSRF by submitting a specially crafted XML Schema Definition XSD string. This can lead to unauthorized access to sensitive information, including...

9.3CVSS0.00527EPSS
SaveExploits0References5
attackerkb
attackerkb
•added 2026/07/10 9:29 a.m.•24 views

CVE-2026-15378

A flaw was found in the guardrails-detectors component. This vulnerability allows a remote attacker to perform a blind Server-Side Request Forgery SSRF by submitting a specially crafted XML Schema Definition XSD string. This can lead to unauthorized access to sensitive information, including...

9.3CVSS7.5AI score0.00527EPSS
SaveExploits0References3
CVE
CVE
•added 2026/07/10 9:29 a.m.•148 views

CVE-2026-15378

The CVE-2026-15378 entry concerns the guardrails-detectors component where a flaw allows remote attackers to perform a blind Server-Side Request Forgery (SSRF) by submitting a crafted XML Schema Definition string. This can lead to unauthorized access to sensitive information (e.g., credentials fr...

9.3CVSS7.5AI score0.00527EPSS
SaveExploits0References5
EUVD
EUVD
•added 2026/07/10 9:29 a.m.•27 views

EUVD-2026-42858

A flaw was found in the guardrails-detectors component. This vulnerability allows a remote attacker to perform a blind Server-Side Request Forgery SSRF by submitting a specially crafted XML Schema Definition XSD string. This can lead to unauthorized access to sensitive information, including...

9.3CVSS7.5AI score0.00527EPSS
SaveExploits0References2
Cvelist
Cvelist
•added 2026/07/10 9:29 a.m.•70 views

CVE-2026-15378 Guardrails-detectors: guardrails-detectors: ssrf and local file read via user-supplied xml schema (xml-with-schema:)

A flaw was found in the guardrails-detectors component. This vulnerability allows a remote attacker to perform a blind Server-Side Request Forgery SSRF by submitting a specially crafted XML Schema Definition XSD string. This can lead to unauthorized access to sensitive information, including...

9.3CVSS0.00527EPSS
SaveExploits0References5
RedhatCVE
RedhatCVE
•added 2026/07/10 9:24 a.m.•27 views

CVE-2026-15378

A flaw was found in the guardrails-detectors component. This vulnerability allows a remote attacker to perform a blind Server-Side Request Forgery SSRF by submitting a specially crafted XML Schema Definition XSD string. This can lead to unauthorized access to sensitive information, including...

9.3CVSS7.5AI score0.00527EPSS
SaveExploits0References3
Positive Technologies
Positive Technologies
•added 2026/07/10 12:00 a.m.•38 views

PT-2026-57144

Name of the Vulnerable Software and Affected Versions guardrails-detectors affected versions not specified Red Hat Enterprise Linux affected versions not specified Red Hat OpenShift AI affected versions not specified Description A flaw in the guardrails-detectors component allows a remote attacke...

9.3CVSS7.5AI score0.00527EPSS
SaveExploits0References14
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/07/10 12:00 a.m.•10 views

CVE-2026-15378: Server-Side Request Forgery (SSRF)

A flaw was found in the guardrails-detectors component. This vulnerability allows a remote attacker to perform a blind Server-Side Request Forgery SSRF by submitting a specially crafted XML Schema Definition XSD string. This can lead to unauthorized access to sensitive information, including...

9.3CVSS7.5AI score0.00527EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies
•added 2026/07/10 12:00 a.m.•46 views

PT-2026-57201

Name of the Vulnerable Software and Affected Versions guardrails-detectors affected versions not specified Description A flaw exists in the file type content detector that allows a remote attacker to provide an arbitrary XML Schema Definition XSD string. Because the XSD is processed without prope...

9.3CVSS7.5AI score0.0053EPSS
SaveExploits0References8
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/07/10 12:00 a.m.•10 views

CVE-2026-15143: Server-Side Request Forgery (SSRF)

A flaw was found in the filetype content detector of guardrails-detectors. This vulnerability allows a remote attacker to supply an arbitrary XML Schema Definition XSD string, which is processed without proper restrictions. This can lead to server-side requests to arbitrary URLs or local file...

9.3CVSS7.4AI score0.0053EPSS
SaveExploits0References2
NVD
NVD
•added 2026/07/08 8:16 p.m.•31 views

CVE-2026-15154

A flaw was found in guardrails-detectors, a component of Red Hat OpenShift AI. This vulnerability, known as Regular Expression Denial of Service ReDoS, allows a remote attacker to provide specially crafted regular expressions to the public detection API. This can cause catastrophic backtracking,...

6.5CVSS0.00476EPSS
SaveExploits0References8
Cvelist
Cvelist
•added 2026/07/08 7:50 p.m.•72 views

CVE-2026-15154 Guardrails-detectors: guardrails-detectors: unauthenticated regular-expression denial of service (redos) via detector_params.regex

A flaw was found in guardrails-detectors, a component of Red Hat OpenShift AI. This vulnerability, known as Regular Expression Denial of Service ReDoS, allows a remote attacker to provide specially crafted regular expressions to the public detection API. This can cause catastrophic backtracking,...

6.5CVSS0.00476EPSS
SaveExploits0References8
attackerkb
attackerkb
•added 2026/07/08 7:50 p.m.•24 views

CVE-2026-15154

A flaw was found in guardrails-detectors, a component of Red Hat OpenShift AI. This vulnerability, known as Regular Expression Denial of Service ReDoS, allows a remote attacker to provide specially crafted regular expressions to the public detection API. This can cause catastrophic backtracking,...

6.5CVSS7.5AI score0.00476EPSS
SaveExploits0References4
CVE
CVE
•added 2026/07/08 7:50 p.m.•62 views

CVE-2026-15154

Technical details (affected products/versions, root cause specifics, remediation) are not publicly provided in the supplied documents. Monitor for updates to confirm scope, impact and fixes for CVE-2026-15154 regarding guardrails-detectors in Red Hat OpenShift AI.

6.5CVSS7.5AI score0.00476EPSS
SaveExploits0References8Affected Software1
Rows per page
Query Builder