aiir vulnerabilities
CVEs whose affected-version data names the aiir package (pip). Each record lists the affected and patched versions; check a specific version with the dependency checker or POST /api/sbom.
2 CVEsRSS
CVE-2026-105161Medium· 5.3A flaw has been found in invariant-systems-ai aiir up to 1.7.0
A flaw has been found in invariant-systems-ai aiir up to 1.7.0. The affected element is an unknown function of the component Policy Gate Handler. Executing a manipulation can lead to improper verification of cryptographic signature. The …
▾ Sunlitinvariant-systems-ai · aiirEPSS 0.14%via NVD
GHSA-73p9-6hrp-8qhrMediumAIIR verification and policy gates could report success without enforcing the control (fail-open)
AIIR verification and policy gates could report success without enforcing the control (fail-open)
▾ Sunlitaiir · aiirvia GHSA