https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-06T18:16:03.936362+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/euvd-2026-245618 EUVD-2026-245618 2026-10-06T18:16:03.961215+00:00 EUVD-2026-245618 https://cve.radiocsirt.org/vuln/fkie_cve-2025-6518 fkie_cve-2025-6518 2026-10-06T18:16:03.961259+00:00

A vulnerability was found in PySpur-Dev pyspur up to 0.1.18. It has been classified as critical. Affected is the function SingleLLMCallNode of the file backend/pyspur/nodes/llm/single_llm_call.py of the component Jinja2 Template Handler. The manipulation of the argument user_message leads to improper neutralization of special elements used in a template engine. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be used.

 https://cve.radiocsirt.org/vuln/ghsa-8gff-cf92-72pv GHSA-8gff-cf92-72pv — pyspur Incomplete Filtering of Special Elements allowed by SingleLLMCallNode function 2026-10-06T18:16:03.961295+00:00

Affected: PyPI: pyspur

A vulnerability was found in PySpur-Dev pyspur up to 0.1.18. It has been classified as critical. Affected is the function SingleLLMCallNode of the file backend/pyspur/nodes/llm/single_llm_call.py of the component Jinja2 Template Handler. The manipulation of the argument user_message leads to improper neutralization of special elements used in a template engine. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be used.

 https://cve.radiocsirt.org/vuln/pysec-2026-1844 PYSEC-2026-1844 — pyspur Incomplete Filtering of Special Elements allowed by SingleLLMCallNode function 2026-10-06T18:16:03.961335+00:00

Affected: PyPI: pyspur

A vulnerability was found in PySpur-Dev pyspur up to 0.1.18. It has been classified as critical. Affected is the function SingleLLMCallNode of the file backend/pyspur/nodes/llm/single_llm_call.py of the component Jinja2 Template Handler. The manipulation of the argument user_message leads to improper neutralization of special elements used in a template engine. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be used.