Pybars4
Monthly
Code injection in pybars4 through 0.9.13 lets an attacker who controls the source text of a Handlebars template execute Python in the application process, because crafted bracketed path segments in a helper or block argument are not escaped when the compiler emits its resolve() string literal. The supplied CVSS 4.0 score is 9.2, but the independent assessment treats exploitation as gated by template-source control rather than merely untrusted rendered data; static, developer-authored templates do not satisfy that prerequisite. KEV status is not indicated in the supplied data, no public exploit identified at time of analysis, and the vuln.today priority label is monitor.
Code injection in pybars4 through 0.9.13 lets an attacker who controls the source text of a Handlebars template execute Python in the application process, because crafted bracketed path segments in a helper or block argument are not escaped when the compiler emits its resolve() string literal. The supplied CVSS 4.0 score is 9.2, but the independent assessment treats exploitation as gated by template-source control rather than merely untrusted rendered data; static, developer-authored templates do not satisfy that prerequisite. KEV status is not indicated in the supplied data, no public exploit identified at time of analysis, and the vuln.today priority label is monitor.