Approved changes feed: RSS · Atom
cpe:2.3:a:pyspur-dev:pyspur:*:*:*:*:*:*:*:*part: a version: * update: *
| Vendor | Pyspur Dev (fa71a8e5-195e-547c-ab3c-44f96df8cd42) |
|---|---|
| Product | Pyspur (b1b28fd6-ac4d-50aa-a087-71433438bb20) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | * |
| Target hardware | * |
| Other | * |
Notes
Imported from gcve-enriched-dumps CVE data
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
| No PURL mappings for this CPE yet. | ||
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2025-6518 |
vulnerable | 2026-06-08 07:43:15.202785 |
PySpur-Dev pyspur Jinja2 Template single_llm_call.py SingleLLMCallNode special elements used in a template engine
MEDIUM (6.3)
A vulnerability was found in PySpur-Dev pyspur up to 0.1.18. It has been classified as critical. Affected is the function SingleLLMCallNode of the file backend/pyspur/nodes/llm/single_llm_call.py of the component Jinja2 Template Handler. The manipulation of the argument user_message leads to improper neutralization of special elements used in a template engine. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be used.
Published: 2025-06-23T19:00:11.222Z
Updated: 2025-06-23T19:25:40.707Z |
Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.
Inspect record JSON
Open this panel to browse, search, copy or download the JSON record.