Lucene search
+L

24 matches found

NVD
NVD
•added 2026/07/10 4:16 p.m.•29 views

CVE-2026-15143

A flaw was found in the filetype content detector of guardrails-detectors. This vulnerability allows a remote attacker to supply an arbitrary XML Schema Definition XSD string, which is processed without proper restrictions. This can lead to server-side requests to arbitrary URLs or local file...

9.3CVSS0.00432EPSS
SaveExploits0References2
CVE
CVE
•added 2026/07/10 3:25 p.m.•38 views

CVE-2026-15143

CVE-2026-15143 affects guardrails-detectors' file_type content detector. An attacker can supply an arbitrary XML Schema (XSD) string, processed without proper restrictions, enabling server-side requests to arbitrary URLs or local file reads and risking disclosure of sensitive information.

9.3CVSS6.1AI score0.00432EPSS
SaveExploits0References2
Vulnrichment
Vulnrichment
•added 2026/07/10 3:25 p.m.•24 views

CVE-2026-15143 Guardrails-detectors: guardrails-detectors: ssrf and local file read via user-supplied xml schema (xml-with-schema:)

A flaw was found in the filetype content detector of guardrails-detectors. This vulnerability allows a remote attacker to supply an arbitrary XML Schema Definition XSD string, which is processed without proper restrictions. This can lead to server-side requests to arbitrary URLs or local file...

9.3CVSS6.1AI score0.00432EPSS
SaveExploits0References2
Cvelist
Cvelist
•added 2026/07/10 3:25 p.m.•50 views

CVE-2026-15143 Guardrails-detectors: guardrails-detectors: ssrf and local file read via user-supplied xml schema (xml-with-schema:)

A flaw was found in the filetype content detector of guardrails-detectors. This vulnerability allows a remote attacker to supply an arbitrary XML Schema Definition XSD string, which is processed without proper restrictions. This can lead to server-side requests to arbitrary URLs or local file...

9.3CVSS0.00432EPSS
SaveExploits0References2
RedhatCVE
RedhatCVE
•added 2026/07/10 3:20 p.m.•20 views

CVE-2026-15143

A flaw was found in the filetype content detector of guardrails-detectors. This vulnerability allows a remote attacker to supply an arbitrary XML Schema Definition XSD string, which is processed without proper restrictions. This can lead to server-side requests to arbitrary URLs or local file...

9.3CVSS6.1AI score0.00432EPSS
SaveExploits0References3
NVD
NVD
•added 2026/07/10 10:16 a.m.•23 views

CVE-2026-15378

A flaw was found in the guardrails-detectors component. This vulnerability allows a remote attacker to perform a blind Server-Side Request Forgery SSRF by submitting a specially crafted XML Schema Definition XSD string. This can lead to unauthorized access to sensitive information, including...

9.3CVSS0.00527EPSS
SaveExploits0References4
attackerkb
attackerkb
•added 2026/07/10 9:29 a.m.•16 views

CVE-2026-15378

A flaw was found in the guardrails-detectors component. This vulnerability allows a remote attacker to perform a blind Server-Side Request Forgery SSRF by submitting a specially crafted XML Schema Definition XSD string. This can lead to unauthorized access to sensitive information, including...

9.3CVSS6.1AI score0.00527EPSS
SaveExploits0References3
EUVD
EUVD
•added 2026/07/10 9:29 a.m.•21 views

EUVD-2026-42858

A flaw was found in the guardrails-detectors component. This vulnerability allows a remote attacker to perform a blind Server-Side Request Forgery SSRF by submitting a specially crafted XML Schema Definition XSD string. This can lead to unauthorized access to sensitive information, including...

9.3CVSS6.1AI score0.00527EPSS
SaveExploits0References2
CVE
CVE
•added 2026/07/10 9:29 a.m.•132 views

CVE-2026-15378

The CVE-2026-15378 entry concerns the guardrails-detectors component where a flaw allows remote attackers to perform a blind Server-Side Request Forgery (SSRF) by submitting a crafted XML Schema Definition string. This can lead to unauthorized access to sensitive information (e.g., credentials fr...

9.3CVSS6.1AI score0.00527EPSS
SaveExploits0References4
Cvelist
Cvelist
•added 2026/07/10 9:29 a.m.•59 views

CVE-2026-15378 Guardrails-detectors: guardrails-detectors: ssrf and local file read via user-supplied xml schema (xml-with-schema:)

A flaw was found in the guardrails-detectors component. This vulnerability allows a remote attacker to perform a blind Server-Side Request Forgery SSRF by submitting a specially crafted XML Schema Definition XSD string. This can lead to unauthorized access to sensitive information, including...

9.3CVSS0.00527EPSS
SaveExploits0References4
RedhatCVE
RedhatCVE
•added 2026/07/10 9:24 a.m.•16 views

CVE-2026-15378

A flaw was found in the guardrails-detectors component. This vulnerability allows a remote attacker to perform a blind Server-Side Request Forgery SSRF by submitting a specially crafted XML Schema Definition XSD string. This can lead to unauthorized access to sensitive information, including...

9.3CVSS6.1AI score0.00527EPSS
SaveExploits0References3
Positive Technologies
Positive Technologies
•added 2026/07/10 12:00 a.m.•31 views

PT-2026-57144

Name of the Vulnerable Software and Affected Versions guardrails-detectors affected versions not specified Red Hat Enterprise Linux affected versions not specified Red Hat OpenShift AI affected versions not specified Description A flaw in the guardrails-detectors component allows a remote attacke...

9.3CVSS6.1AI score0.00527EPSS
SaveExploits0References14
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/07/10 12:00 a.m.•3 views

CVE-2026-15378: Server-Side Request Forgery (SSRF)

A flaw was found in the guardrails-detectors component. This vulnerability allows a remote attacker to perform a blind Server-Side Request Forgery SSRF by submitting a specially crafted XML Schema Definition XSD string. This can lead to unauthorized access to sensitive information, including...

9.3CVSS5.9AI score0.00527EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies
•added 2026/07/10 12:00 a.m.•40 views

PT-2026-57201

A flaw was found in the file type content detector of guardrails-detectors. This vulnerability allows a remote attacker to supply an arbitrary XML Schema Definition XSD string, which is processed without proper restrictions. This can lead to server-side requests to arbitrary URLs or local file...

9.3CVSS6.1AI score0.00432EPSS
SaveExploits0References3
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/07/10 12:00 a.m.•1 views

CVE-2026-15143: Server-Side Request Forgery (SSRF)

A flaw was found in the filetype content detector of guardrails-detectors. This vulnerability allows a remote attacker to supply an arbitrary XML Schema Definition XSD string, which is processed without proper restrictions. This can lead to server-side requests to arbitrary URLs or local file...

9.3CVSS6AI score0.00432EPSS
SaveExploits0References2
NVD
NVD
•added 2026/07/08 8:16 p.m.•21 views

CVE-2026-15154

A flaw was found in guardrails-detectors, a component of Red Hat OpenShift AI. This vulnerability, known as Regular Expression Denial of Service ReDoS, allows a remote attacker to provide specially crafted regular expressions to the public detection API. This can cause catastrophic backtracking,...

6.5CVSS0.00465EPSS
SaveExploits0References7
Cvelist
Cvelist
•added 2026/07/08 7:50 p.m.•63 views

CVE-2026-15154 Guardrails-detectors: guardrails-detectors: unauthenticated regular-expression denial of service (redos) via detector_params.regex

A flaw was found in guardrails-detectors, a component of Red Hat OpenShift AI. This vulnerability, known as Regular Expression Denial of Service ReDoS, allows a remote attacker to provide specially crafted regular expressions to the public detection API. This can cause catastrophic backtracking,...

6.5CVSS0.00465EPSS
SaveExploits0References7
EUVD
EUVD
•added 2026/07/08 7:50 p.m.•16 views

EUVD-2026-42382

A flaw was found in guardrails-detectors, a component of Red Hat OpenShift AI. This vulnerability, known as Regular Expression Denial of Service ReDoS, allows a remote attacker to provide specially crafted regular expressions to the public detection API. This can cause catastrophic backtracking,...

6.5CVSS5.9AI score0.00465EPSS
SaveExploits0References2
CVE
CVE
•added 2026/07/08 7:50 p.m.•52 views

CVE-2026-15154

Technical details (affected products/versions, root cause specifics, remediation) are not publicly provided in the supplied documents. Monitor for updates to confirm scope, impact and fixes for CVE-2026-15154 regarding guardrails-detectors in Red Hat OpenShift AI.

6.5CVSS5.9AI score0.00465EPSS
SaveExploits0References7Affected Software1
attackerkb
attackerkb
•added 2026/07/08 7:50 p.m.•18 views

CVE-2026-15154

A flaw was found in guardrails-detectors, a component of Red Hat OpenShift AI. This vulnerability, known as Regular Expression Denial of Service ReDoS, allows a remote attacker to provide specially crafted regular expressions to the public detection API. This can cause catastrophic backtracking,...

6.5CVSS5.9AI score0.00465EPSS
SaveExploits0References4
Rows per page
Query Builder