Threats tagged 'ghsa-x54v-7mw2-5rrx'

pybars4 versions up to 0.9.13 have a code injection vulnerability in the pybars/_compiler.py file. This flaw allows attackers to execute arbitrary Python code by injecting unescaped bracketed path segments in Handlebars templates. Specifically, crafted template segments in helper or block arguments can break out of the generated resolve() string literal, leading to code execution within the application process.