Threats tagged 'ghsa-g3jq-5q72-jc6f'

A delimiter injection vulnerability exists in mistral.rs versions before 0.9.5 within the mistralrs-core component. This flaw allows attackers who can control input documents, web pages, or tool outputs to inject tool calls by embedding delimiter strings such as </tool_call>. This causes parsers like qwen-xml, gemma4, or reasoning parsers to execute additional tool calls with attacker-supplied arguments. The vulnerability is fixed in version 0.9.5.