Skip to content
OpenAdvisories

Package · PyPI

ragas

2 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • Medium 6.3
    CVE-2026-6587

    vibrantlabsai RAGAS Collections util.py _try_process_url server-side request forgery

    A security flaw has been discovered in vibrantlabsai RAGAS up to 0.4.3. The affected element is the function _try_process_local_file/_try_process_url of the file src/ragas/metrics/collections/multi_modal_faithfulness/util.py of the component Collections Modul…

    vibrantlabsai RAGAS ragas PyPI