Skip to content
OpenAdvisories

Vendor

deepset-ai

4 known vulnerabilities.

Products

farm 2 haystack 1 deepset-ai/haystack 1
All Critical High Medium Low Exploited only Public exploit

2 results · Clear filters · Feed

  • Medium 4.8
    CVE-2026-120335

    deepset-ai farm Model Package Loader language_model.py WordEmbedding_LM.load path traversal

    A vulnerability has been found in deepset-ai farm up to 0.8.0. Affected is the function WordEmbedding_LM.load of the file farm/modeling/language_model.py of the component Model Package Loader. The manipulation of the argument embeddings_filename leads to path…

    deepset-ai farm
  • Medium 4.3
    CVE-2026-120334

    deepset-ai farm Tokenizer Loader tokenization.py EmbeddingTokenizer.from_pretrained path traversal

    A flaw has been found in deepset-ai farm up to 0.8.0. This impacts the function EmbeddingTokenizer.from_pretrained of the file farm/modeling/tokenization.py of the component Tokenizer Loader. Executing a manipulation of the argument vocab_filename can lead to…

    deepset-ai farm