Banks: Unsafe importlib.import_module of attacker-controlled Tool.import_path in CompletionExtension allows RCE

Summary banks parses Tool JSON objects from the rendered body of % completion % blocks and later resolves their importpath field through importlib.importmodule... + getattr... to obtain the callable that handles a tool call. There is no allowlist or sanitization on importpath, so any importable...

Improper Neutralization of Special Elements in Output Used by a Downstream Component ('Injection')

Overview banks is an A prompt programming language Affected versions of this package are vulnerable to Improper Neutralization of Special Elements in Output Used by a Downstream Component 'Injection' via Prompt.chatmessages, which parsed every line of a rendered template as a possible ChatMessage...