AI Threat Alert

spaCy Vulnerabilities

pip ML Libraries
25
Risk Score
2
Total CVEs
1
Critical
pip
Ecosystem
May 8, 2026
Last CVE
100%
Patch Rate
14d
Avg Time to Patch
33,579 stars 4,682 forks 204 issues 143 dependents Last push Mar 28, 2026
View on GitHub
OpenSSF Scorecard 5.4/10

Known Vulnerabilities (2 total, page 1 of 1)

Severity CVE ID Summary CVSS Published
HIGH CVE-2026-44209 banks: SSTI enables RCE via unsandboxed Jinja2 templates 7.5 May 8, 2026 CRITICAL CVE-2025-25362 spacy-llm: SSTI allows unauthenticated RCE (CVSS 9.8) 9.8 Mar 5, 2025

Monitor spaCy in your stack

Get instant alerts when new vulnerabilities affect spaCy. CISO analysis, ATLAS technique mappings, and compliance reports included.

Start Monitoring