AI and data stack advisories

Severe, 6 weeks1496Projects326

1496 severe, 6 weeks · 326 projects

Packages

Haystack security advisories

2 advisories · none critical or high in 12 months · latest Jul 31, 2024

Repository

2 advisories

High 7.5Jul 31, 2024Insecure Jinja2 templates rendered in Haystack Components can lead to RCECVE-2024-41950fixed in 2.3.1Critical 9.8Mar 30, 2023Use of hard-coded, security-relevant constants in deepset-ai/haystackCVE-2023-1712no fix yet
About Haystack

The framework for RAG pipelines and agents.

Packages watched: haystack-ai (PyPI), farm-haystack (PyPI).

deepset-ai/haystackdeepset

deepset elsewhere on Ibis: Paydays