9 matches found
Banks: User-controlled prompt input can be parsed as privileged chat messages
Summary Banks' Prompt.chatmessages method parses every rendered output line as a potential ChatMessage JSON object. If attacker-controlled template data renders to JSON such as "role":"system","content":"...", Banks returns it as a privileged system message instead of treating it as plain...
PYSEC-2026-4202 Banks: User-controlled prompt input can be parsed as privileged chat messages
Summary Banks' Prompt.chatmessages method parses every rendered output line as a potential ChatMessage JSON object. If attacker-controlled template data renders to JSON such as "role":"system","content":"...", Banks returns it as a privileged system message instead of treating it as plain...
CVE-2026-107717
Banks generates meaningful LLM prompts using a simple template language. Prior to 2.5.0, Banks Prompt.chatmessages attempts to parse every line of rendered template output as ChatMessage JSON. When an application renders untrusted data and passes the returned ChatMessage objects to an LLM provide...
GHSA-HMQ2-7HP6-7CRH Banks: User-controlled prompt input can be parsed as privileged chat messages
Summary Banks' Prompt.chatmessages method parses every rendered output line as a potential ChatMessage JSON object. If attacker-controlled template data renders to JSON such as "role":"system","content":"...", Banks returns it as a privileged system message instead of treating it as plain...
Banks: User-controlled prompt input can be parsed as privileged chat messages
Summary Banks' Prompt.chatmessages method parses every rendered output line as a potential ChatMessage JSON object. If attacker-controlled template data renders to JSON such as "role":"system","content":"...", Banks returns it as a privileged system message instead of treating it as plain...
Improper Neutralization of Special Elements in Output Used by a Downstream Component ('Injection')
Overview banks is an A prompt programming language Affected versions of this package are vulnerable to Improper Neutralization of Special Elements in Output Used by a Downstream Component 'Injection' via Prompt.chatmessages, which parsed every line of a rendered template as a possible ChatMessage...
CVE-2026-107717
The Banks library (prior to version 2.5.0 ) is vulnerable to a prompt injection flaw in the Prompt.chat_messages() function. The issue stems from the software attempting to parse every line of rendered template output as ChatMessage JSON . Because ChatMessage.role accepts arbitrary strings, an at...
CVE-2026-107717 Banks: User-controlled prompt input can be parsed as privileged chat messages
Banks generates meaningful LLM prompts using a simple template language. Prior to 2.5.0, Banks Prompt.chatmessages attempts to parse every line of rendered template output as ChatMessage JSON. When an application renders untrusted data and passes the returned ChatMessage objects to an LLM provide...
CVE-2026-107717 Banks: User-controlled prompt input can be parsed as privileged chat messages
Banks generates meaningful LLM prompts using a simple template language. Prior to 2.5.0, Banks Prompt.chatmessages attempts to parse every line of rendered template output as ChatMessage JSON. When an application renders untrusted data and passes the returned ChatMessage objects to an LLM provide...