~ / search / GHSA-vvw2-h478-xwr3

GHSA-vvw2-h478-xwr3

DSPy does not properly restrict file reads

Source: GitHub Advisory Database (reviewed) Moderate CVE-2025-12695

Packages

EcosystemPackageAffectedFixed in
PyPI dspy <= 3.0.3 no fix listed

Details

As written in the advisory (Markdown source, shown as plain text).

The overly permissive sandbox configuration in DSPy allows attackers to steal sensitive files in cases when users build an AI agent which consumes user input and uses the “PythonInterpreter” class.

References

External links from the advisory. They lead to third-party sites.