Deepset-ai
2 CVEs tracked since 2026. Since Nov 2026, none of them reached CISA KEV.
Deepset-ai CVEs per month
| Month | CVEs | In CISA KEV |
|---|---|---|
| 2026-11 | 2 | 0 |
Products
The products that kept showing up in Deepset-ai's monthly top three, with their CVEs summed over those months.
Latest CVEs
The 4 most recently published vulnerabilities affecting Deepset-ai.
- CVE-2026-120335deepset-ai farm Model Package Loader language_model.py WordEmbedding_LM.load path traversal4.8
- CVE-2026-120334deepset-ai farm Tokenizer Loader tokenization.py EmbeddingTokenizer.from_pretrained path traversal4.3
- CVE-2024-41950Insecure Jinja2 templates rendered in Haystack Components can lead to RCE7.5
- CVE-2023-1712Use of Hard-coded, Security-relevant Constants in deepset-ai/haystack9.8
The record
- Peak rank
- #11 in Nov 2026
- Busiest month shown
- Nov 2026, 2 CVEs
- Months with a KEV entry
- 0 since Nov 2026
- Monthly snapshots
- 1 since 2026