Exploit for XPath Injection in Huggingface Smolagents

🔐 Smolagents XPath Injection Simulation Framework CVE-2025-11...

agentengine (>=0.1.5 <=0.1.8), deepmost (=0.5.2) +13 more potentially affected by CVE-2025-11844 via smolagents (>=0.1.3 <=1.21.1)

smolagents PYPI version =0.1.3, =0.1.5, =0.1.0, =0.1.1, =0.1.1, =0.1.0, =0.16.0, =2.4.0, =0.0.1.dev0, =0.0.1, =0.3.0, =0.3.7 Source cves: CVE-2025-11844 Source advisory: OSV:GHSA-8MF9-RMGW-33QC...

agentengine (>=0.1.5 <=0.1.8), deepmost (=0.5.2) +12 more potentially affected by CVE-2025-11844 via smolagents (>=1.12.0 <=1.21.1)

smolagents PYPI version =1.12.0, =0.1.5, =0.1.0, =0.1.1, =0.1.1, =0.1.0, =0.16.0, =2.4.0, =0.0.1.dev0, =0.0.1, =0.3.0, =0.3.7 Source cves: CVE-2025-11844 Source advisory: SNYK:PYTHON-SMOLAGENTS-13537512...