Lucene search
+L

39 matches found

osv_pysec
osv_pysec
•added 2026/07/13 2:36 p.m.•33 views

PYSEC-2026-2439 datapizza-ai: Server-Side Template Injection in ChatPromptTemplate via Jinja2 Template Handler

A flaw has been found in datapizza-labs datapizza-ai 0.0.2. Affected is the function ChatPromptTemplate of the file datapizza-ai-core/datapizza/modules/prompt/prompt.py of the component Jinja2 Template Handler. This manipulation of the argument Prompt causes improper neutralization of special...

5.1CVSS5AI score0.00762EPSS
SaveExploits2References8
Rows per page
Query Builder