Threats tagged 'ghsa-xvx4-89q3-mchg'

1 threat

Severity	CVSS	Threat	Source	Published	Score and star
Critical	9.2	CVE-2026-119716pybars3 through 0.9.7 contains a code injection vulnerability in pybars/_compiler.py that allows template authors to Critical9.22026-10-30GCVE DatabaseCVE-2026-119716 pybars3 versions up to 0.9.7 have a code injection vulnerability in the pybars/_compiler.py component. This flaw allows template authors to execute arbitrary Python code by supplying crafted Handlebars templates with unescaped bracketed path segments. The vulnerability enables breaking out of string literals and running Python code within the application process. Report on CVE-2026-119716 Vulnerability CWE-94 #ghsa-xvx4-89q3-mchg	GCVE Database	2026-10-30

Page 1 of 1