GHSA-wpg4-h5g2-jxm6: document the existing fix and first patched release

The prompt-generator advisory currently lists no patched version, no fix reference, and no CWE. The repository appears to already contain the fix in a released version.

Could you confirm the release boundary and update the existing advisory with:

• Patched version: 0.25.0 for this specific prompt-generator SSTI.
• Fix: PR #14068, merged as 6fdca2d2125edcf9bc91eeb26975314483e9e892.
• Weakness: CWE-1336, already present in the CVE-2026-45312 CNA record.

Release evidence

The fix was merged on April 13, 2026. It switches the environment used by citation_prompt() from jinja2.Environment to SandboxedEnvironment and adds regression tests.

• v0.24.0 still uses the unsandboxed environment.
• v0.25.0 uses the sandboxed environment. The release was published on April 21, 2026.
• The commit comparison has the fix commit as its merge base: ahead 95, behind 0. The release contains the fix.

Focused verification

I checked the actual environment declaration and citation_prompt() function from five source snapshots with Jinja2 3.1.6. Ordinary template rendering worked in each. A harmless lookup of the Jinja utility module's name through the documented object-traversal path succeeded on v0.23.1 and v0.24.0, and raised SecurityError on v0.25.0, v0.27.2, and the checked main snapshot.

This was an isolated function-level check, not a full HTTP exploit or an incident-payload replay. It made no OS-command or network calls. The scope is the specific prompt-generator issue, not other template-rendering components or a claim that an entire release is free of vulnerabilities.

These proposed metadata changes can be verified from public upstream sources alone. No change to the existing affected-version range or severity is proposed.

If this validation is useful for the advisory update, please consider crediting HsiangNianian as an Analyst or Remediation verifier. The original discovery, reporting, and fix credits should remain with their existing contributors.