pybars4 through 0.9.13 Code Injection via Bracketed Path Segments
Historical advisory recorded 30 Oct 2026 16:45:26 UTC. Read the latest advisory.
cve-program · CVE-2026-119717
Publishedpybars4 through 0.9.13 contains a code injection vulnerability in pybars/_compiler.py that allows attackers to execute Python code via unescaped bracketed path segments in Handlebars templates. Attackers can supply a template with a crafted segment in a helper or block argument to break out of the generated resolve() string literal and execute code in the application process.
Read the publisher's advisoryAffected versions, risk and source history
cve-program · CVE-2026-119717
Publishedpybars4 through 0.9.13 Code Injection via Bracketed Path Segments
pybars4 through 0.9.13 contains a code injection vulnerability in pybars/_compiler.py that allows attackers to execute Python code via unescaped bracketed path segments in Handlebars templates. Attackers can supply a template with a crafted segment in a helper or block argument to break out of the generated resolve() string literal and execute code in the application process.
- Source published
- 30 Oct 2026 15:16:14 UTC
- Source modified
- 30 Oct 2026 15:16:14 UTC
- Saved here
- 30 Oct 2026 16:45:26 UTC
- Source terms
- CVE Program Terms of Use
Original source record · Cite this exact observation · Complete original publisher JSON
Source: cve-program · CVE Program Terms of Use. The publisher's wording is preserved. ChangeIntel groups the information and labels changes. The JSON record includes additional source fields.
CVSS 4.0 · 9.2 CVSS:4.0/AV:N/AC:H/AT:P/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N
CVSS 3.1 · 8.1 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H