Lucene search
+L

26 matches found

NVD
NVD
•added 2026/07/10 4:16 p.m.•36 views

CVE-2026-15143

A flaw was found in the filetype content detector of guardrails-detectors. This vulnerability allows a remote attacker to supply an arbitrary XML Schema Definition XSD string, which is processed without proper restrictions. This can lead to server-side requests to arbitrary URLs or local file...

9.3CVSS0.00432EPSS
SaveExploits0References2
CVE
CVE
•added 2026/07/10 3:25 p.m.•55 views

CVE-2026-15143

CVE-2026-15143 affects guardrails-detectors' file_type content detector. An attacker can supply an arbitrary XML Schema (XSD) string, processed without proper restrictions, enabling server-side requests to arbitrary URLs or local file reads and risking disclosure of sensitive information.

9.3CVSS6AI score0.00432EPSS
SaveExploits0References2
Cvelist
Cvelist
•added 2026/07/10 3:25 p.m.•59 views

CVE-2026-15143 Guardrails-detectors: guardrails-detectors: ssrf and local file read via user-supplied xml schema (xml-with-schema:)

A flaw was found in the filetype content detector of guardrails-detectors. This vulnerability allows a remote attacker to supply an arbitrary XML Schema Definition XSD string, which is processed without proper restrictions. This can lead to server-side requests to arbitrary URLs or local file...

9.3CVSS0.00432EPSS
SaveExploits0References2
osv-cve
osv-cve
•added 2026/07/10 3:25 p.m.•8 views

CVE-2026-15143 Guardrails-detectors: guardrails-detectors: ssrf and local file read via user-supplied xml schema (xml-with-schema:)

A flaw was found in the filetype content detector of guardrails-detectors. This vulnerability allows a remote attacker to supply an arbitrary XML Schema Definition XSD string, which is processed without proper restrictions. This can lead to server-side requests to arbitrary URLs or local file...

9.3CVSS6.1AI score0.00432EPSS
SaveExploits0References6
Vulnrichment
Vulnrichment
•added 2026/07/10 3:25 p.m.•28 views

CVE-2026-15143 Guardrails-detectors: guardrails-detectors: ssrf and local file read via user-supplied xml schema (xml-with-schema:)

A flaw was found in the filetype content detector of guardrails-detectors. This vulnerability allows a remote attacker to supply an arbitrary XML Schema Definition XSD string, which is processed without proper restrictions. This can lead to server-side requests to arbitrary URLs or local file...

9.3CVSS6AI score0.00432EPSS
SaveExploits0References2
RedhatCVE
RedhatCVE
•added 2026/07/10 3:20 p.m.•25 views

CVE-2026-15143

A flaw was found in the filetype content detector of guardrails-detectors. This vulnerability allows a remote attacker to supply an arbitrary XML Schema Definition XSD string, which is processed without proper restrictions. This can lead to server-side requests to arbitrary URLs or local file...

9.3CVSS6AI score0.00432EPSS
SaveExploits0References3
NVD
NVD
•added 2026/07/10 10:16 a.m.•29 views

CVE-2026-15378

A flaw was found in the guardrails-detectors component. This vulnerability allows a remote attacker to perform a blind Server-Side Request Forgery SSRF by submitting a specially crafted XML Schema Definition XSD string. This can lead to unauthorized access to sensitive information, including...

9.3CVSS0.00527EPSS
SaveExploits0References5
CVE
CVE
•added 2026/07/10 9:29 a.m.•146 views

CVE-2026-15378

The CVE-2026-15378 entry concerns the guardrails-detectors component where a flaw allows remote attackers to perform a blind Server-Side Request Forgery (SSRF) by submitting a crafted XML Schema Definition string. This can lead to unauthorized access to sensitive information (e.g., credentials fr...

9.3CVSS7.5AI score0.00527EPSS
SaveExploits0References5
Cvelist
Cvelist
•added 2026/07/10 9:29 a.m.•67 views

CVE-2026-15378 Guardrails-detectors: guardrails-detectors: ssrf and local file read via user-supplied xml schema (xml-with-schema:)

A flaw was found in the guardrails-detectors component. This vulnerability allows a remote attacker to perform a blind Server-Side Request Forgery SSRF by submitting a specially crafted XML Schema Definition XSD string. This can lead to unauthorized access to sensitive information, including...

9.3CVSS0.00527EPSS
SaveExploits0References5
EUVD
EUVD
•added 2026/07/10 9:29 a.m.•26 views

EUVD-2026-42858

A flaw was found in the guardrails-detectors component. This vulnerability allows a remote attacker to perform a blind Server-Side Request Forgery SSRF by submitting a specially crafted XML Schema Definition XSD string. This can lead to unauthorized access to sensitive information, including...

9.3CVSS7.5AI score0.00527EPSS
SaveExploits0References2
attackerkb
attackerkb
•added 2026/07/10 9:29 a.m.•24 views

CVE-2026-15378

A flaw was found in the guardrails-detectors component. This vulnerability allows a remote attacker to perform a blind Server-Side Request Forgery SSRF by submitting a specially crafted XML Schema Definition XSD string. This can lead to unauthorized access to sensitive information, including...

9.3CVSS7.5AI score0.00527EPSS
SaveExploits0References3
RedhatCVE
RedhatCVE
•added 2026/07/10 9:24 a.m.•25 views

CVE-2026-15378

A flaw was found in the guardrails-detectors component. This vulnerability allows a remote attacker to perform a blind Server-Side Request Forgery SSRF by submitting a specially crafted XML Schema Definition XSD string. This can lead to unauthorized access to sensitive information, including...

9.3CVSS7.5AI score0.00527EPSS
SaveExploits0References3
Positive Technologies
Positive Technologies
•added 2026/07/10 12:00 a.m.•38 views

PT-2026-57144

Name of the Vulnerable Software and Affected Versions guardrails-detectors affected versions not specified Red Hat Enterprise Linux affected versions not specified Red Hat OpenShift AI affected versions not specified Description A flaw in the guardrails-detectors component allows a remote attacke...

9.3CVSS7.5AI score0.00527EPSS
SaveExploits0References14
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/07/10 12:00 a.m.•9 views

CVE-2026-15378: Server-Side Request Forgery (SSRF)

A flaw was found in the guardrails-detectors component. This vulnerability allows a remote attacker to perform a blind Server-Side Request Forgery SSRF by submitting a specially crafted XML Schema Definition XSD string. This can lead to unauthorized access to sensitive information, including...

9.3CVSS7.5AI score0.00527EPSS
SaveExploits0References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/07/10 12:00 a.m.•7 views

CVE-2026-15143: Server-Side Request Forgery (SSRF)

A flaw was found in the filetype content detector of guardrails-detectors. This vulnerability allows a remote attacker to supply an arbitrary XML Schema Definition XSD string, which is processed without proper restrictions. This can lead to server-side requests to arbitrary URLs or local file...

9.3CVSS6AI score0.00432EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies
•added 2026/07/10 12:00 a.m.•45 views

PT-2026-57201

Name of the Vulnerable Software and Affected Versions guardrails-detectors affected versions not specified Description A flaw exists in the file type content detector that allows a remote attacker to provide an arbitrary XML Schema Definition XSD string. Because the XSD is processed without prope...

9.3CVSS6AI score0.00432EPSS
SaveExploits0References8
NVD
NVD
•added 2026/07/08 8:16 p.m.•29 views

CVE-2026-15154

A flaw was found in guardrails-detectors, a component of Red Hat OpenShift AI. This vulnerability, known as Regular Expression Denial of Service ReDoS, allows a remote attacker to provide specially crafted regular expressions to the public detection API. This can cause catastrophic backtracking,...

6.5CVSS0.00476EPSS
SaveExploits0References8
attackerkb
attackerkb
•added 2026/07/08 7:50 p.m.•23 views

CVE-2026-15154

A flaw was found in guardrails-detectors, a component of Red Hat OpenShift AI. This vulnerability, known as Regular Expression Denial of Service ReDoS, allows a remote attacker to provide specially crafted regular expressions to the public detection API. This can cause catastrophic backtracking,...

6.5CVSS7.5AI score0.00476EPSS
SaveExploits0References4
Cvelist
Cvelist
•added 2026/07/08 7:50 p.m.•71 views

CVE-2026-15154 Guardrails-detectors: guardrails-detectors: unauthenticated regular-expression denial of service (redos) via detector_params.regex

A flaw was found in guardrails-detectors, a component of Red Hat OpenShift AI. This vulnerability, known as Regular Expression Denial of Service ReDoS, allows a remote attacker to provide specially crafted regular expressions to the public detection API. This can cause catastrophic backtracking,...

6.5CVSS0.00476EPSS
SaveExploits0References8
EUVD
EUVD
•added 2026/07/08 7:50 p.m.•22 views

EUVD-2026-42382

A flaw was found in guardrails-detectors, a component of Red Hat OpenShift AI. This vulnerability, known as Regular Expression Denial of Service ReDoS, allows a remote attacker to provide specially crafted regular expressions to the public detection API. This can cause catastrophic backtracking,...

6.5CVSS7.5AI score0.00476EPSS
SaveExploits0References2
Rows per page
Query Builder