{"metadata": {"vulnerability": "CVE-2025-25362", "count": 22, "kinds": {"milestone": 5, "sighting": 8, "kev": 0, "other": 9}}, "data": [{"timestamp": "2025-02-07T00:00:00Z", "date_only": false, "value": "2025-02-07T00:00:00.000Z", "kind": "milestone", "label": "Reserved", "source": "cvelistv5", "record": "CVE-2025-25362", "field": "cveMetadata.dateReserved"}, {"timestamp": "2025-03-05T00:00:00Z", "date_only": false, "value": "2025-03-05T00:00:00.000Z", "kind": "milestone", "label": "Published", "source": "cvelistv5", "record": "CVE-2025-25362", "field": "cveMetadata.datePublished"}, {"timestamp": "2025-03-05T20:36:50Z", "date_only": false, "value": "2025-03-05T20:36:50.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/DarkWebInformer_CVEAlerts/6613", "record": "CVE-2025-25362", "field": "creation_timestamp", "uuid": "6bc33036-749f-4e7e-83dc-ba71086ae269", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2025-25362\n\ud83d\udd25 CVSS Score: N/A\n\ud83d\udd39 Description: A Server-Side Template Injection (SSTI) vulnerability in Spacy-LLM v0.7.2 allows attackers to execute arbitrary code via injecting a crafted payload into the template field.\n\ud83d\udccf Published: 2025-03-05T00:00:00.000Z\n\ud83d\udccf Modified: 2025-03-05T20:12:58.165Z\n\ud83d\udd17 References:\n1. https://github.com/explosion/spacy-llm/issues/492", "url": "https://t.me/DarkWebInformer_CVEAlerts/6613"}, {"timestamp": "2025-03-05T21:15:19Z", "date_only": false, "value": "2025-03-05T21:15:19Z", "kind": "other", "label": "Nvd published at", "source": "github \u00b7 GHSA-793V-GXFP-9Q9H", "record": "GHSA-793V-GXFP-9Q9H", "field": "database_specific.nvd_published_at"}, {"timestamp": "2025-03-05T21:15:19.803Z", "date_only": false, "value": "2025-03-05T21:15:19.803", "kind": "milestone", "label": "Published", "source": "fkie_nvd \u00b7 FKIE_CVE-2025-25362", "record": "FKIE_CVE-2025-25362", "field": "published"}, {"timestamp": "2025-03-05T21:32:13Z", "date_only": false, "value": "2025-03-05T21:32:13Z", "kind": "milestone", "label": "Published", "source": "github \u00b7 GHSA-793V-GXFP-9Q9H", "record": "GHSA-793V-GXFP-9Q9H", "field": "published"}, {"timestamp": "2025-03-05T23:39:40.671Z", "date_only": false, "value": "2025-03-05T23:39:40.671681Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3ljo5nlello2h", "record": "CVE-2025-25362", "field": "creation_timestamp", "uuid": "946fff54-47f4-4ec8-a1ec-ee53877276ee", "url": "https://bsky.app/profile/cve.skyfleet.blue/post/3ljo5nlello2h"}, {"timestamp": "2025-03-06T01:18:24Z", "date_only": false, "value": "2025-03-06T01:18:24.000000Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/cvedetector/19666", "record": "CVE-2025-25362", "field": "creation_timestamp", "uuid": "d23bfbe5-8de1-4f93-8e7f-e20e8ddccc92", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2025-25362 - Spacy-LLM SSTI Code Execution\", \n  \"Content\": \"CVE ID : CVE-2025-25362 \nPublished : March 5, 2025, 9:15 p.m. | 2\u00a0hours, 22\u00a0minutes ago \nDescription : A Server-Side Template Injection (SSTI) vulnerability in Spacy-LLM v0.7.2 allows attackers to execute arbitrary code via injecting a crafted payload into the template field. \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"06 Mar 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "url": "https://t.me/cvedetector/19666"}, {"timestamp": "2025-03-06T14:27:29.337Z", "date_only": false, "value": "2025-03-06T14:27:29.337804Z", "kind": "other", "label": "Recorded", "source": "cvelistv5 / CISA-ADP", "record": "CVE-2025-25362", "field": "containers.adp.0.metrics.1.other.content.timestamp"}, {"timestamp": "2025-03-06T14:27:29.337Z", "date_only": false, "value": "2025-03-06T14:27:29.337804Z", "kind": "other", "label": "Recorded", "source": "fkie_nvd \u00b7 FKIE_CVE-2025-25362", "record": "FKIE_CVE-2025-25362", "field": "metrics.ssvcV203.0.ssvcData.timestamp"}, {"timestamp": "2025-03-06T17:48:43.512Z", "date_only": false, "value": "2025-03-06T17:48:43.512968Z", "kind": "sighting", "label": "Seen", "source": "https://mastodon.social/users/CyberSignaler/statuses/114116743799665732", "record": "CVE-2025-25362", "field": "creation_timestamp", "uuid": "8978561e-840f-4736-87bc-79c08d11e435", "url": "https://mastodon.social/users/CyberSignaler/statuses/114116743799665732"}, {"timestamp": "2025-03-07T00:00:07.906Z", "date_only": false, "value": "2025-03-07T00:00:07.906545Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/vulnalerts.bsky.social/post/3ljqpb3xgca24", "record": "CVE-2025-25362", "field": "creation_timestamp", "uuid": "1b076b3a-7bd9-4e71-9f2d-98f0cbbe05bf", "url": "https://bsky.app/profile/vulnalerts.bsky.social/post/3ljqpb3xgca24"}, {"timestamp": "2025-04-02T13:03:41.277Z", "date_only": false, "value": "2025-04-02T13:03:41.277Z", "kind": "other", "label": "Updated", "source": "cvelistv5 / mitre", "record": "CVE-2025-25362", "field": "containers.cna.providerMetadata.dateUpdated"}, {"timestamp": "2025-04-02T22:59:09Z", "date_only": false, "value": "2025-04-02T22:59:09Z", "kind": "other", "label": "Updated", "source": "github \u00b7 GHSA-793V-GXFP-9Q9H", "record": "GHSA-793V-GXFP-9Q9H", "field": "modified"}, {"timestamp": "2025-04-08T20:35:57.417Z", "date_only": false, "value": "2025-04-08T20:35:57.417Z", "kind": "other", "label": "Updated", "source": "cvelistv5", "record": "CVE-2025-25362", "field": "cveMetadata.dateUpdated"}, {"timestamp": "2025-04-08T20:35:57.417Z", "date_only": false, "value": "2025-04-08T20:35:57.417Z", "kind": "other", "label": "Updated", "source": "cvelistv5 / CISA-ADP", "record": "CVE-2025-25362", "field": "containers.adp.0.providerMetadata.dateUpdated"}, {"timestamp": "2025-04-08T20:46:47Z", "date_only": false, "value": "2025-04-08T20:46:47.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/DarkWebInformer_CVEAlerts/11003", "record": "CVE-2025-25362", "field": "creation_timestamp", "uuid": "17f99728-4f9d-4410-b06f-4593cffc7992", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2025-25362\n\ud83d\udd25 CVSS Score: N/A\n\ud83d\udd39 Description: A Server-Side Template Injection (SSTI) vulnerability in Spacy-LLM v0.7.2 allows attackers to execute arbitrary code via injecting a crafted payload into the template field.\n\ud83d\udccf Published: 2025-03-05T00:00:00.000Z\n\ud83d\udccf Modified: 2025-04-08T20:35:57.417Z\n\ud83d\udd17 References:\n1. https://github.com/explosion/spacy-llm/issues/492\n2. https://www.hacktivesecurity.com/blog/2025/04/01/cve-2025-25362-old-vulnerabilities-new-victims-breaking-llm-prompts-with-ssti/", "url": "https://t.me/DarkWebInformer_CVEAlerts/11003"}, {"timestamp": "2025-08-18T13:31:23Z", "date_only": false, "value": "2025-08-18T13:31:23.000000Z", "kind": "sighting", "label": "Seen", "source": "MISP/4937e86f-f5bd-4d09-8bda-88a7440077f3", "record": "CVE-2025-25362", "field": "creation_timestamp", "uuid": "38f33a9d-cb5b-498d-9e43-dff14831c413"}, {"timestamp": "2025-08-19T02:47:45Z", "date_only": false, "value": "2025-08-19T02:47:45.000000Z", "kind": "sighting", "label": "Seen", "source": "MISP/4937e86f-f5bd-4d09-8bda-88a7440077f3", "record": "CVE-2025-25362", "field": "creation_timestamp", "uuid": "3bfb6884-f291-4ee9-a400-0f961411e27d"}, {"timestamp": "2026-06-17T09:00:42.410Z", "date_only": false, "value": "2026-06-17T09:00:42.410", "kind": "other", "label": "Updated", "source": "fkie_nvd \u00b7 FKIE_CVE-2025-25362", "record": "FKIE_CVE-2025-25362", "field": "lastModified"}, {"timestamp": "2026-07-07T14:34:50.512Z", "date_only": false, "value": "2026-07-07T14:34:50.512301Z", "kind": "milestone", "label": "Published", "source": "pysec \u00b7 PYSEC-2026-1934", "record": "PYSEC-2026-1934", "field": "published"}, {"timestamp": "2026-07-07T17:25:25.244Z", "date_only": false, "value": "2026-07-07T17:25:25.244326Z", "kind": "other", "label": "Updated", "source": "pysec \u00b7 PYSEC-2026-1934", "record": "PYSEC-2026-1934", "field": "modified"}]}