Skip to content
Ddeepset-ai
Exploited and recent CVEs
-
CVE-2026-120335
Medium 4.8
deepset-ai farm Model Package Loader language_model.py WordEmbedding_LM.load path traversal
0.2%
-
CVE-2026-120334
Medium 4.3
deepset-ai farm Tokenizer Loader tokenization.py EmbeddingTokenizer.from_pretrained path traversal
0.5%
-
CVE-2024-41950
High 7.5
Insecure Jinja2 templates rendered in Haystack Components can lead to RCE
1.2%
-
CVE-2023-1712
Critical 9.1
Use of Hard-coded, Security-relevant Constants in deepset-ai/haystack
0.9%