agentic-layer-testbench (>=0.9.1, <=0.10.0), agentic-rag-pdf (>=0.1.2, <=0.1.5) +98 more potentially affected by CVE-2026-6587 via ragas (>=0.2.6, <=0.4.3)

ragas PYPI version =0.2.6, =0.9.1, =0.1.2, =1.1.0a20250502, =1.1.0a20250502, =1.1.0a20250502, =1.1.0rc1, =1.1.0a20250502, =1.1.0a20250502, =1.1.0a20250502, =1.1.0a20250502, =0.12.0, =1.1.0a20251020, =1.1.0a20250429, =1.1.0rc1, =1.4.3 and more Source cves: CVE-2026-6587 Source advisory:...

RAGAS has SSRF via Multi-Modal Faithfulness Collections Module

A security flaw has been discovered in vibrantlabsai RAGAS up to 0.4.3. The affected element is the function tryprocesslocalfile/tryprocessurl of the file src/ragas/metrics/collections/multimodalfaithfulness/util.py of the component Collections Module. Performing a manipulation of the argument...

PYSEC-2026-3046 RAGAS has SSRF via Multi-Modal Faithfulness Collections Module

A security flaw has been discovered in vibrantlabsai RAGAS up to 0.4.3. The affected element is the function tryprocesslocalfile/tryprocessurl of the file src/ragas/metrics/collections/multimodalfaithfulness/util.py of the component Collections Module. Performing a manipulation of the argument...

RAGAS has an Arbitrary File Read vulnerability

An Arbitrary File Read vulnerability exists in the ImageTextPromptValue class in Exploding Gradients RAGAS v0.2.3 to v0.2.14. The vulnerability stems from improper validation and sanitization of URLs supplied in the retrievedcontexts parameter when handling multimodal inputs...

aiqtoolkit (>=1.1.0a20251020, <=1.5.0a20260122), aiqtoolkit-agno (>=1.3.0, <=1.3.1) +41 more potentially affected by CVE-2025-45691 via ragas (>=0.2.6, <=0.2.15)

ragas PYPI version =0.2.6, =1.1.0a20251020, =1.3.0, =1.1.0a20250506, =1.3.0, =1.1.0a20251020, =1.3.0, =1.3.0, =2.8.1, =1.0.0, =1.1.0a20251020, =1.4.0a20251206, =1.1.0a20251020, =1.1.0a20251020, =1.4.0a20260106, =1.5.0a20260211, =1.5.0a20260218 and more Source cves: CVE-2025-45691 Source advisory:...

PT-2026-59667

An Arbitrary File Read vulnerability exists in the ImageTextPromptValue class in Exploding Gradients RAGAS v0.2.3 to v0.2.14. The vulnerability stems from improper validation and sanitization of URLs supplied in the retrieved contexts parameter when handling multimodal inputs...

lightspeed-stack (>=0.1.1, <=0.4.2), lightspeed-stack-providers (>=0.1.10, <=0.4.3) +5 more potentially affected by CVE-2026-25211 via llama-stack (>=0.2.9, <=0.4.3)

llama-stack PYPI version =0.2.9, =0.1.1, =0.1.10, =1.0.1, =0.3.4, =0.1.0, =0.2.0, =0.3.0a0 Source cves: CVE-2026-25211 Source advisory: OSV:PYSEC-2026-1572...

catalog-agent (>=0.1.1, <=0.1.6), longtrainer (>=0.3.1, <=0.3.4) +2 more potentially affected by CVE-2026-41488 via langchain-openai (0.2.8)

langchain-openai PYPI version 0.2.8 is affected by a known vulnerability. The following packages have a transitive dependency on langchain-openai and may be impacted: - catalog-agent =0.1.1, =0.3.1, =0.1.3, =0.1.4 Source cves: CVE-2026-41488 Source advisory: OSV:PYSEC-2026-76...

CVE-2026-6587

A flaw was found in vibrantlabsai RAGAS. A remote attacker can exploit a server-side request forgery SSRF vulnerability by manipulating the retrievedcontexts argument within the tryprocesslocalfile or tryprocessurl functions. This manipulation allows the attacker to induce the server to make...

Server-side Request Forgery (SSRF)

Overview ragas is an Evaluation framework for RAG and LLM applications Affected versions of this package are vulnerable to Server-side Request Forgery SSRF via improper validation of URLs in the retrievedcontexts parameter when processing multimodal inputs. An attacker can access arbitrary files,...

agentic-layer-testbench (>=0.9.1, <=0.10.0), agentic-rag-pdf (>=0.1.2, <=0.1.5) +98 more potentially affected by CVE-2025-45691 +1 more via ragas (>=0.2.6, <=0.4.3)

ragas PYPI version =0.2.6, =0.9.1, =0.1.2, =1.1.0a20250502, =1.1.0a20250502, =1.1.0a20250502, =1.1.0rc1, =1.1.0a20250502, =1.1.0a20250502, =1.1.0a20250502, =1.1.0a20250502, =0.12.0, =1.1.0a20251020, =1.1.0a20250429, =1.1.0rc1, =1.4.3 and more Source cves: CVE-2025-45691, CVE-2026-6587 Source...

agentic-layer-testbench (>=0.9.1, <=0.10.0), agentic-rag-pdf (>=0.1.2, <=0.1.5) +98 more potentially affected by CVE-2026-6587 via ragas (>=0.2.6, <=0.4.3)

ragas PYPI version =0.2.6, =0.9.1, =0.1.2, =1.1.0a20250502, =1.1.0a20250502, =1.1.0a20250502, =1.1.0rc1, =1.1.0a20250502, =1.1.0a20250502, =1.1.0a20250502, =1.1.0a20250502, =0.12.0, =1.1.0a20251020, =1.1.0a20250429, =1.1.0rc1, =1.4.3 and more Source cves: CVE-2026-6587 Source advisory:...

GHSA-95WW-475F-PR4F RAGAS has SSRF via Multi-Modal Faithfulness Collections Module

A security flaw has been discovered in vibrantlabsai RAGAS up to 0.4.3. The affected element is the function tryprocesslocalfile/tryprocessurl of the file src/ragas/metrics/collections/multimodalfaithfulness/util.py of the component Collections Module. Performing a manipulation of the argument...

RAGAS has SSRF via Multi-Modal Faithfulness Collections Module

A security flaw has been discovered in vibrantlabsai RAGAS up to 0.4.3. The affected element is the function tryprocesslocalfile/tryprocessurl of the file src/ragas/metrics/collections/multimodalfaithfulness/util.py of the component Collections Module. Performing a manipulation of the argument...

EUVD-2026-23727

A security flaw has been discovered in vibrantlabsai RAGAS up to 0.4.3. The affected element is the function tryprocesslocalfile/tryprocessurl of the file src/ragas/metrics/collections/multimodalfaithfulness/util.py of the component Collections Module. Performing a manipulation of the argument...

CVE-2026-6587

A security flaw has been discovered in vibrantlabsai RAGAS up to 0.4.3. The affected element is the function tryprocesslocalfile/tryprocessurl of the file src/ragas/metrics/collections/multimodalfaithfulness/util.py of the component Collections Module. Performing a manipulation of the argument...

CVE-2026-6587

A server-side request forgery (SSRF) vulnerability exists in vibrantlabsai RAGAS versions up to 0.4.3 (specifically prior to 0.4.4 ). The flaw is located in the Collections Module within the src/ragas/metrics/collections/multi_modal_faithfulness/util.py file, specifically affecting the _try_proce...

CVE-2026-6587 vibrantlabsai RAGAS Collections util.py _try_process_url server-side request forgery

A security flaw has been discovered in vibrantlabsai RAGAS up to 0.4.3. The affected element is the function tryprocesslocalfile/tryprocessurl of the file src/ragas/metrics/collections/multimodalfaithfulness/util.py of the component Collections Module. Performing a manipulation of the argument...

CVE-2026-6587

A security flaw has been discovered in vibrantlabsai RAGAS up to 0.4.3. The affected element is the function tryprocesslocalfile/tryprocessurl of the file src/ragas/metrics/collections/multimodalfaithfulness/util.py of the component Collections Module. Performing a manipulation of the argument...

CVE-2026-6587 vibrantlabsai RAGAS Collections util.py _try_process_url server-side request forgery

A security flaw has been discovered in vibrantlabsai RAGAS up to 0.4.3. The affected element is the function tryprocesslocalfile/tryprocessurl of the file src/ragas/metrics/collections/multimodalfaithfulness/util.py of the component Collections Module. Performing a manipulation of the argument...