Changes.Watch~ upgrade verdicts ~
Free digest
ExploitedPHP2Shell is now on CISA KEV

critical vulnerability

Use of hard-coded, security-relevant constants in deepset-ai/haystack

No fix yetCritical · CVSS 9.8EPSS 0.85%

Published Mar 30, 2023 · updated Oct 27, 2026

What to do

  1. Some affected packages have no fixed version yet: follow the advisory for mitigations and watch this page for the fix.
  2. Redeploy and restart long-running processes so they load the fixed code.

Affected packages

PyPIfarm-haystack9,016 downloads/week

Vulnerable versions
<= 1.15.0
Fixed in
no fix yet

Check your project: pip show farm-haystack

Sources

CWE-547 Use of Hard-coded, Security-relevant Constants

← All critical vulnerabilities