guardrails-ai
1 advisory in the AI Sec Watch database names guardrails-ai (PyPI). guardrails-ai (PyPI) has declared an LLM component as a dependency since 2023-03-13.
Adding guardrails to large language models.
The first release to declare it was version 0.1.0rc1.
Advisories
Advisories that name guardrails-ai as affected and state PyPI as its ecosystem. For a version-exact check of your own dependencies, use Stack Check.
| Advisory | Severity | Affected | Fixed in | Published |
|---|---|---|---|---|
| CVE-2026-45758GHSA-xmpw-2vmm-p4p6: Malicious code in guardrails-ai 0.10.1 (supply chain compromise) | Critical | = 0.10.1 | 2026-05-19 |
Dependencies of the latest release
As declared in PyPI metadata for version 0.11.0. Optional extras are listed with their extra name.
- anthropic[anthropic]Anthropic SDK
- faiss-cpu[vectordb]FAISS
- guardrails-api[api]LiteLLM, OpenAI SDK
- langchain-coreLangChain
- litellmLiteLLM
- llama-index[llama]LlamaIndex
- manifest-ml[manifest]Hugging Face Hub / Transformers
- mlflow[databricks]FastMCP, LangChain
- openaiOpenAI SDK
- transformers[huggingface]Hugging Face Hub / Transformers
- click
- diff-match-patch
- docformatter[dev]
- docspec-python[docs-build]
- faker
- guardrails-ai-types
- guardrails-hub-types
- guardrails-jsonformer[huggingface]
- jsonref
- jsonschema
- liccheck[dev]
- lxml
- lxml-stubs[dev]
- numpy[vectordb]
- opentelemetry-exporter-otlp-proto-grpc
- opentelemetry-exporter-otlp-proto-http
- opentelemetry-sdk
- pip
- pre-commit[dev]
- pydantic
- pydash
- pydoc-markdown[docs-build]
- pyjwt
- pypdfium2[dev]
- pyright[dev]
- pytest[dev]
- pytest-asyncio[dev]
- pytest-cov[dev]
- pytest-mock[dev]
- python-dateutil
- requests
- rich
- rstr
- ruff[dev]
- semver
- sqlalchemy[sql]
- sqlglot[sql]
- sqlvalidator[sql]
- tenacity
- tiktoken
- torch[huggingface]
- twine[dev]
- typer
- typing-extensions
- uvloop[uv]
Tracked packages that depend on it
Among the packages in the registry; not every dependent on PyPI.