PyPI: nemoguardrails

SFTY-20240131-03391

Safety legacy ID: pyup.io-64722

Nemoguardrails 0.7.0 addresses server security vulnerabilities. These issues were primarily associated with uncontrolled data being utilized within path expressions and potential information leakage via exceptions. https://github.com/NVIDIA/NeMo-Guardrails/commit/21e2ffc37d806b7014654d280da76df4ded48c13

Created at: Nov 5, 2025Updated at: Nov 5, 2025

Overview

Nemoguardrails 0.7.0 addresses server security vulnerabilities. These issues were primarily associated with uncontrolled data being utilized within path expressions and potential information leakage via exceptions. https://github.com/NVIDIA/NeMo-Guardrails/commit/21e2ffc37d806b7014654d280da76df4ded48c13

Advisory

Nemoguardrails 0.7.0 addresses server security vulnerabilities. These issues were primarily associated with uncontrolled data being utilized within path expressions and potential information leakage via exceptions. https://github.com/NVIDIA/NeMo-Guardrails/commit/21e2ffc37d806b7014654d280da76df4ded48c13

Affected Package

Affecting nemoguardrails package, versions<0.7.0

Also affects

---

How to Fix

Upgradenemoguardrailsto0.7.0or higher.

Mitigation and Workarounds

---

Vulnerable Functions

Functions linked to known vulnerabilities.

Vulnerable function data is available for Enterprise customers

Book a call with us to see Safety in action.

Safety

Verified by Safety

Our Cybersecurity Intelligence Team reviewed this vulnerability. We combine public data with our own research to find issues not yet reported to public sources.

Learn more