txtai vulnerabilities

1 known vulnerability in txtai from Neuml. 1 is rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.

Latest first

• 9.8 Critical severity

  txtai: Improper Control of Generation of Code

  CVE-2026-58449Jun 30, 2026NeumlEPSS 1.35%

  txtai through 9.10.0, fixed in commit 11b32da, exposes an API /reindex endpoint whose function body parameter is resolved through txtai.util.Resolver, which performs __import__ and getattr on the caller-supplied dotted path with no allowlist. When the API is e