DSPy vulnerabilities

1 known vulnerability in DSPy from Stanford NLP. 1 is rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.

Latest first

• 8.6 High severity

  DSPy: External Control of File Name or Path

  CVE-2026-72742Aug 11, 2026Stanford NLP

  DSPy 3.3.0b1 contains a file exfiltration vulnerability in the Image and Audio output field adapters that allows attackers with influence over language model outputs to read arbitrary local files by injecting a filesystem path into the url field of a parsed Im