CVE-2026-72742

DSPy 3.3.0b1 contains a file exfiltration vulnerability in the Image and Audio output field adapters that allows attackers with influence over language model outputs to read arbitrary local files by injecting a filesystem path into the url field of a parsed Image or Audio typed output. The...

CVE-2026-72742

DSPy 3.3.0b1 contains a file exfiltration vulnerability in the Image and Audio output field adapters that allows attackers with influence over language model outputs to read arbitrary local files by injecting a filesystem path into the url field of a parsed Image or Audio typed output. The...

CVE-2026-72742

DSPy 3.3.0b1 contains a file exfiltration vulnerability in the Image and Audio output field adapters that allows attackers with influence over language model outputs to read arbitrary local files by injecting a filesystem path into the url field of a parsed Image or Audio typed output. The...

CVE-2026-72742

DSPy 3.3.0b1 contains a file exfiltration vulnerability in the Image and Audio output field adapters. By injecting a filesystem path into the URL field of a parsed Image or Audio output, untrusted language model completions are parsed via TypeAdapter validation, triggering encode_image/encode_aud...

EUVD-2026-56886

DSPy 3.3.0b1 contains a file exfiltration vulnerability in the Image and Audio output field adapters that allows attackers with influence over language model outputs to read arbitrary local files by injecting a filesystem path into the url field of a parsed Image or Audio typed output. The...

CVE-2026-72742 DSPy 3.3.0b1 Local File Read via Image/Audio Output Field Parsing

DSPy 3.3.0b1 contains a file exfiltration vulnerability in the Image and Audio output field adapters that allows attackers with influence over language model outputs to read arbitrary local files by injecting a filesystem path into the url field of a parsed Image or Audio typed output. The...

CVE-2026-72742 DSPy 3.3.0b1 Local File Read via Image/Audio Output Field Parsing

DSPy 3.3.0b1 contains a file exfiltration vulnerability in the Image and Audio output field adapters that allows attackers with influence over language model outputs to read arbitrary local files by injecting a filesystem path into the url field of a parsed Image or Audio typed output. The...

PT-2026-70872

DSPy 3.3.0b1 contains a file exfiltration vulnerability in the Image and Audio output field adapters that allows attackers with influence over language model outputs to read arbitrary local files by injecting a filesystem path into the url field of a parsed Image or Audio typed output. The...

com.netflix.hollow:hollow-diff-ui (2.0.1), com.netflix.hollow:hollow-jsonadapter (2.0.1) +1 more potentially affected by CVE-2021-28099 via com.netflix.hollow:hollow (2.0.1)

com.netflix.hollow:hollow MAVEN version 2.0.1 is affected by a known vulnerability. The following packages have a transitive dependency on com.netflix.hollow:hollow and may be impacted: - com.netflix.hollow:hollow-diff-ui 2.0.1 - com.netflix.hollow:hollow-jsonadapter 2.0.1 -...

com.netflix.hollow:hollow-diff-ui (2.1.0), com.netflix.hollow:hollow-jsonadapter (2.1.0) +1 more potentially affected by CVE-2021-28099 via com.netflix.hollow:hollow (2.1.0)

com.netflix.hollow:hollow MAVEN version 2.1.0 is affected by a known vulnerability. The following packages have a transitive dependency on com.netflix.hollow:hollow and may be impacted: - com.netflix.hollow:hollow-diff-ui 2.1.0 - com.netflix.hollow:hollow-jsonadapter 2.1.0 -...

com.netflix.hollow:hollow-diff-ui (2.1.1), com.netflix.hollow:hollow-jsonadapter (2.1.1) +1 more potentially affected by CVE-2021-28099 via com.netflix.hollow:hollow (2.1.1)

com.netflix.hollow:hollow MAVEN version 2.1.1 is affected by a known vulnerability. The following packages have a transitive dependency on com.netflix.hollow:hollow and may be impacted: - com.netflix.hollow:hollow-diff-ui 2.1.1 - com.netflix.hollow:hollow-jsonadapter 2.1.1 -...

com.netflix.hollow:hollow-diff-ui (2.2.0), com.netflix.hollow:hollow-jsonadapter (2.2.0) +1 more potentially affected by CVE-2021-28099 via com.netflix.hollow:hollow (2.2.0)

com.netflix.hollow:hollow MAVEN version 2.2.0 is affected by a known vulnerability. The following packages have a transitive dependency on com.netflix.hollow:hollow and may be impacted: - com.netflix.hollow:hollow-diff-ui 2.2.0 - com.netflix.hollow:hollow-jsonadapter 2.2.0 -...

com.netflix.hollow:hollow-diff-ui (2.2.1), com.netflix.hollow:hollow-jsonadapter (2.2.1) +1 more potentially affected by CVE-2021-28099 via com.netflix.hollow:hollow (2.2.1)

com.netflix.hollow:hollow MAVEN version 2.2.1 is affected by a known vulnerability. The following packages have a transitive dependency on com.netflix.hollow:hollow and may be impacted: - com.netflix.hollow:hollow-diff-ui 2.2.1 - com.netflix.hollow:hollow-jsonadapter 2.2.1 -...

com.netflix.hollow:hollow-diff-ui (2.3.0), com.netflix.hollow:hollow-jsonadapter (2.3.0) +1 more potentially affected by CVE-2021-28099 via com.netflix.hollow:hollow (2.3.0)

com.netflix.hollow:hollow MAVEN version 2.3.0 is affected by a known vulnerability. The following packages have a transitive dependency on com.netflix.hollow:hollow and may be impacted: - com.netflix.hollow:hollow-diff-ui 2.3.0 - com.netflix.hollow:hollow-jsonadapter 2.3.0 -...

com.netflix.hollow:hollow-diff-ui (2.4.2), com.netflix.hollow:hollow-jsonadapter (2.4.2) +1 more potentially affected by CVE-2021-28099 via com.netflix.hollow:hollow (2.4.2)

com.netflix.hollow:hollow MAVEN version 2.4.2 is affected by a known vulnerability. The following packages have a transitive dependency on com.netflix.hollow:hollow and may be impacted: - com.netflix.hollow:hollow-diff-ui 2.4.2 - com.netflix.hollow:hollow-jsonadapter 2.4.2 -...

com.netflix.hollow:hollow-diff-ui (2.4.4), com.netflix.hollow:hollow-jsonadapter (2.4.4) +1 more potentially affected by CVE-2021-28099 via com.netflix.hollow:hollow (2.4.4)

com.netflix.hollow:hollow MAVEN version 2.4.4 is affected by a known vulnerability. The following packages have a transitive dependency on com.netflix.hollow:hollow and may be impacted: - com.netflix.hollow:hollow-diff-ui 2.4.4 - com.netflix.hollow:hollow-jsonadapter 2.4.4 -...

com.netflix.hollow:hollow-diff-ui (2.5.3), com.netflix.hollow:hollow-explorer-ui (2.5.3) +3 more potentially affected by CVE-2021-28099 via com.netflix.hollow:hollow (2.5.3)

com.netflix.hollow:hollow MAVEN version 2.5.3 is affected by a known vulnerability. The following packages have a transitive dependency on com.netflix.hollow:hollow and may be impacted: - com.netflix.hollow:hollow-diff-ui 2.5.3 - com.netflix.hollow:hollow-explorer-ui 2.5.3 -...

com.netflix.hollow:hollow-diff-ui (2.6.0), com.netflix.hollow:hollow-explorer-ui (2.6.0) +3 more potentially affected by CVE-2021-28099 via com.netflix.hollow:hollow (2.6.0)

com.netflix.hollow:hollow MAVEN version 2.6.0 is affected by a known vulnerability. The following packages have a transitive dependency on com.netflix.hollow:hollow and may be impacted: - com.netflix.hollow:hollow-diff-ui 2.6.0 - com.netflix.hollow:hollow-explorer-ui 2.6.0 -...

com.netflix.hollow:hollow-diff-ui (2.6.1), com.netflix.hollow:hollow-explorer-ui (2.6.1) +3 more potentially affected by CVE-2021-28099 via com.netflix.hollow:hollow (2.6.1)

com.netflix.hollow:hollow MAVEN version 2.6.1 is affected by a known vulnerability. The following packages have a transitive dependency on com.netflix.hollow:hollow and may be impacted: - com.netflix.hollow:hollow-diff-ui 2.6.1 - com.netflix.hollow:hollow-explorer-ui 2.6.1 -...

com.netflix.hollow:hollow-diff-ui (2.8.0), com.netflix.hollow:hollow-explorer-ui (2.8.0) +3 more potentially affected by CVE-2021-28099 via com.netflix.hollow:hollow (2.8.0)

com.netflix.hollow:hollow MAVEN version 2.8.0 is affected by a known vulnerability. The following packages have a transitive dependency on com.netflix.hollow:hollow and may be impacted: - com.netflix.hollow:hollow-diff-ui 2.8.0 - com.netflix.hollow:hollow-explorer-ui 2.8.0 -...