CVE-2025-25362
2 advisories.
PyPI/spacy-llm CVE-2025-25362: critical 9.8, EPSS 0.80%
Spacy-LLM Server-Side Template Injection (SSTI) vulnerability
Action: Upgrade spacy-llm to 0.7.3 or later.
pip install spacy-llm==0.7.3Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | 0.7.3 | - |
Fixed versions
| 0.7.3 |
Sources
- osv: GHSA-793v-gxfp-9q9h
- https://nvd.nist.gov/vuln/detail/CVE-2025-25362
- https://github.com/explosion/spacy-llm/issues/492
- https://github.com/explosion/spacy-llm/pull/491
- https://github.com/explosion/spacy-llm/commit/8bde0490cc1e9de9dd2e84480b7b5cd18a94d739
- https://github.com/explosion/spacy-llm
- https://www.hacktivesecurity.com/blog/2025/04/01/cve-2025-25362-old-vulnerabilities-new-victims-breaking-llm-prompts-with-ssti
CVE-2025-25362 · published · modified · JSON
PyPI/spacy-llm CVE-2025-25362: critical 9.8, EPSS 0.80%
Spacy-LLM Server-Side Template Injection (SSTI) vulnerability
Action: Upgrade spacy-llm to 0.7.3 or later.
pip install spacy-llm==0.7.3Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | 0.7.3 | - |
Fixed versions
| 0.7.3 |
Sources
- osv: PYSEC-2026-1934
- https://nvd.nist.gov/vuln/detail/CVE-2025-25362
- https://github.com/explosion/spacy-llm/issues/492
- https://github.com/explosion/spacy-llm/pull/491
- https://github.com/explosion/spacy-llm/commit/8bde0490cc1e9de9dd2e84480b7b5cd18a94d739
- https://github.com/explosion/spacy-llm
- https://www.hacktivesecurity.com/blog/2025/04/01/cve-2025-25362-old-vulnerabilities-new-victims-breaking-llm-prompts-with-ssti
- https://pypi.org/project/spacy-llm
- https://github.com/advisories/GHSA-793v-gxfp-9q9h
CVE-2025-25362 · published · modified · JSON