CVE-2026-72742

DSPy 3.3.0b1 contains a file exfiltration vulnerability in the Image and Audio output field adapters. By injecting a filesystem path into the URL field of a parsed Image or Audio output, untrusted language model completions are parsed via TypeAdapter validation, triggering encode_image/encode_aud...

CVE-2026-72742: External Control of File Name or Path

DSPy 3.3.0b1 contains a file exfiltration vulnerability in the Image and Audio output field adapters that allows attackers with influence over language model outputs to read arbitrary local files by injecting a filesystem path into the url field of a parsed Image or Audio typed output. The...

CVE-2020-36366

Stack overflow vulnerability in parsevalue Cesanta MJS 1.20.1, allows remote attackers to cause a Denial of Service DoS via a crafted file...

CVE-2020-36366

The CVE-2020-36366 entry maps to Cesanta MJS 1.20.1 and describes a stack overflow vulnerability in the parse_value function. The impact is a Denial of Service via crafted files, with no explicit exploitation details provided in the connected documents. No remediation details are included in the ...

CVE-2020-36366: Uncontrolled Recursion

Stack overflow vulnerability in parsevalue Cesanta MJS 1.20.1, allows remote attackers to cause a Denial of Service DoS via a crafted file...