PT-2025-9854 · Spacy-Llm · Spacy-Llm

Name of the Vulnerable Software and Affected Versions: Spacy-LLM version 0.7.2 Description: A Server-Side Template Injection SSTI vulnerability allows attackers to execute arbitrary code via injecting a crafted payload into the template field. Recommendations: For Spacy-LLM version 0.7.2, as a...