Template Injection

Overview spacy-llm is an Integrating LLMs into structured NLP pipelines Affected versions of this package are vulnerable to Template Injection via the template field. An attacker can execute arbitrary code by injecting a crafted payload. PoC python import spacy nlp = spacy.load"encorewebsm" confi...