deepset-ai vulnerabilities

CVEs per yearBy the year they were published

1. 20231
2. 20241
3. 20262

Newest CVEs

• CVE-2026-120335

  deepset-ai farm Model Package Loader language_model.py WordEmbedding_LM.load path traversal

  deepset-ai · farm

  Low2.4
• CVE-2026-120334

  deepset-ai farm Tokenizer Loader tokenization.py EmbeddingTokenizer.from_pretrained path traversal

  deepset-ai · farm

  Medium5.3
• CVE-2024-41950

  Insecure Jinja2 templates rendered in Haystack Components can lead to RCE

  deepset-ai · haystack

  High7.5
• CVE-2023-1712

  Use of Hard-coded, Security-relevant Constants in deepset-ai/haystack

  deepset-ai · deepset-ai/haystack

  Critical9.1