Lucene search
+L

165 matches found

OSV
OSV
added 2026/07/13 2:36 p.m.6 views

PYSEC-2026-2439 datapizza-ai: Server-Side Template Injection in ChatPromptTemplate via Jinja2 Template Handler

A flaw has been found in datapizza-labs datapizza-ai 0.0.2. Affected is the function ChatPromptTemplate of the file datapizza-ai-core/datapizza/modules/prompt/prompt.py of the component Jinja2 Template Handler. This manipulation of the argument Prompt causes improper neutralization of special...

5.1CVSS5.7AI score0.00686EPSS
SaveExploits2References8
Rows per page
Query Builder