CVE-2025-9556

The langchaingo framework is vulnerable to a Server-Side Template Injection (SSTI) vulnerability due to its support for jinja2 syntax when parsing prompts. This functionality utilizes the gonja library (specifically v1.5.3), which supports include and extends syntax to read files. An attacker can...