repository icon
explosion / spacy Project repository

💫 Industrial-strength Natural Language Processing (NLP) in Python

Submit a report

FIRST INTERACTION

WITHIN10 DAYS

REVIEW

WITHIN33 DAYS

FIX

WITHINN/A DAYS

The model downloading functionality in spaCy has a code execution vulnerability
mouchen626
informative
Critical
Two Reflected XSS with potential other attack vectors
maverickvn360
informative
Medium
Local Command Injection using cli module
maverickvn360
self closed
Code injection in cli.download
mvlttt
informative
Medium