CVE-2026-45758 Malicious code in guardrails-ai 0.10.1 (supply chain compromise)

Guardrails AI is a Python framework that helps build AI applications. On May 11, 2026 at approximately 6:00 PM Pacific, an attacker published a malicious version of guardrails-ai 0.10.1 to PyPI. Aany user who installed guardrails-ai==0.10.1 from PyPI on May 11, 2026 may be affected. Security...

CVE-2026-45758: Embedded Malicious Code

Guardrails AI is a Python framework that helps build AI applications. On May 11, 2026 at approximately 6:00 PM Pacific, an attacker published a malicious version of guardrails-ai 0.10.1 to PyPI. Aany user who installed guardrails-ai==0.10.1 from PyPI on May 11, 2026 may be affected. Security...

external-log-connector (>=0.1.1, <=0.1.2), lmc-external-log-backend (0.1.0) +3 more potentially affected by CVE-2026-10813 via lmcache (>=0.4.3, <=0.5.5)

lmcache PYPI version =0.4.3, =0.1.1, =0.6.1rc1, =1.0.8, =1.0.9 Source cves: CVE-2026-10813 Source advisory: SNYK:PYTHON-LMCACHE-17675615...

a2 (>=0.1.0, <=0.3.17), abadpour (>=6.13.1, <=7.24.1) +978 more potentially affected by CVE-2026-10803 via mlflow (>=0.8.2, <=3.16.1)

mlflow PYPI version =0.8.2, =0.1.0, =6.13.1, =9.273.1, =1.1.0, =0.1.0, =0.1.0, =0.4.4, =0.0.5, =1.0.0, =0.1.0, =0.1.42, =0.1.44 - aidevelopementtoolkit 0.2.0 and more Source cves: CVE-2026-10803 Source advisory: SNYK:PYTHON-MLFLOW-17173043...

ROOT-APP-PYPI-CVE-2024-53899 CVE-2024-53899 in rootio-virtualenv - Patched by Root

Root has patched CVE-2024-53899 in the rootio-virtualenv package for Root:PyPI. Multiple fixed versions available...

ROOT-APP-PYPI-CVE-2024-49766 CVE-2024-49766 in rootio-Werkzeug - Patched by Root

Root has patched CVE-2024-49766 in the rootio-Werkzeug package for Root:PyPI. Multiple fixed versions available...

ROOT-APP-PYPI-CVE-2021-28363 CVE-2021-28363 in rootio-urllib3 - Patched by Root

Root has patched CVE-2021-28363 in the rootio-urllib3 package for Root:PyPI. Multiple fixed versions available...

ROOT-APP-PYPI-CVE-2022-40896 CVE-2022-40896 in rootio-Pygments - Patched by Root

Root has patched CVE-2022-40896 in the rootio-Pygments package for Root:PyPI. Multiple fixed versions available...

ROOT-APP-PYPI-CVE-2023-36464 CVE-2023-36464 in rootio-PyPDF2 - Patched by Root

Root has patched CVE-2023-36464 in the rootio-PyPDF2 package for Root:PyPI. Multiple fixed versions available...

ROOT-APP-PYPI-CVE-2023-6022 CVE-2023-6022 in prefect - Patched by Root

Root has patched CVE-2023-6022 in the prefect package for Root:PyPI. Multiple fixed versions available...

ROOT-APP-PYPI-CVE-2024-8183 CVE-2024-8183 in prefect - Patched by Root

Root has patched CVE-2024-8183 in the prefect package for Root:PyPI. Multiple fixed versions available...

ROOT-APP-PYPI-CVE-2025-68675 CVE-2025-68675 in rootio-apache-airflow - Patched by Root

Root has patched CVE-2025-68675 in the rootio-apache-airflow package for Root:PyPI. Multiple fixed versions available...

ROOT-APP-PYPI-CVE-2024-6827 CVE-2024-6827 in rootio-gunicorn - Patched by Root

Root has patched CVE-2024-6827 in the rootio-gunicorn package for Root:PyPI. Multiple fixed versions available...

ROOT-APP-PYPI-CVE-2024-1135 CVE-2024-1135 in rootio-gunicorn - Patched by Root

Root has patched CVE-2024-1135 in the rootio-gunicorn package for Root:PyPI. Multiple fixed versions available...

ROOT-APP-PYPI-CVE-2023-26302 CVE-2023-26302 in rootio-markdown_it_py - Patched by Root

Root has patched CVE-2023-26302 in the rootio-markdownitpy package for Root:PyPI. Multiple fixed versions available...

ROOT-APP-PYPI-CVE-2025-58065 CVE-2025-58065 in rootio-Flask-AppBuilder - Patched by Root

Root has patched CVE-2025-58065 in the rootio-Flask-AppBuilder package for Root:PyPI. Multiple fixed versions available...

ROOT-APP-PYPI-CVE-2025-32962 CVE-2025-32962 in rootio-Flask-AppBuilder - Patched by Root

Root has patched CVE-2025-32962 in the rootio-Flask-AppBuilder package for Root:PyPI. Multiple fixed versions available...

ROOT-APP-PYPI-CVE-2025-62801 CVE-2025-62801 in rootio-fastmcp - Patched by Root

Root has patched CVE-2025-62801 in the rootio-fastmcp package for Root:PyPI. Multiple fixed versions available...

ROOT-APP-PYPI-GHSA-C2JP-C369-7PVX GHSA-c2jp-c369-7pvx in rootio-fastmcp - Patched by Root

Root has patched GHSA-c2jp-c369-7pvx in the rootio-fastmcp package for Root:PyPI. Multiple fixed versions available...

ROOT-APP-PYPI-CVE-2025-64439 CVE-2025-64439 in rootio-langgraph-checkpoint - Patched by Root

Root has patched CVE-2025-64439 in the rootio-langgraph-checkpoint package for Root:PyPI. Multiple fixed versions available...