Threats affecting pkg:pypi/pybars3

pybars3 versions up to 0.9.7 have a critical code injection vulnerability in the pybars/_compiler.py component. This flaw allows template authors to execute arbitrary Python code by supplying crafted Handlebars templates with unescaped bracketed path segments. Exploitation requires supplying malicious segments in helper or block arguments to break out of string literals and run Python code within the application process.