Lucene search
K

6 matches found

RedhatCVE
RedhatCVE
added 6 days ago8 views

CVE-2026-5559

A vulnerability has been found in AntaresMugisho PyBlade 0.1.8-alpha/0.1.9-alpha. The affected element is the function issafeast of the file sandbox.py of the component AST Validation. Such manipulation leads to improper neutralization of special elements used in a template engine. The attack may...

6.5CVSS5.7AI score0.00022EPSS
Exploits0References1
OSV
OSV
added 2026/04/05 12:30 p.m.1 views

GHSA-23JG-5F8M-GW8C PyBlade: SSTI/RCE via Bypassed AST Validation in sandbox.py

A vulnerability has been found in AntaresMugisho PyBlade 0.1.8-alpha/0.1.9-alpha. The affected element is the function issafeast of the file sandbox.py of the component AST Validation. Such manipulation leads to improper neutralization of special elements used in a template engine. The attack may...

6.3CVSS5.2AI score0.00022EPSS
Exploits0References7
Github Security Blog
Github Security Blog
added 2026/04/05 12:30 p.m.3 views

PyBlade: SSTI/RCE via Bypassed AST Validation in sandbox.py

A vulnerability has been found in AntaresMugisho PyBlade 0.1.8-alpha/0.1.9-alpha. The affected element is the function issafeast of the file sandbox.py of the component AST Validation. Such manipulation leads to improper neutralization of special elements used in a template engine. The attack may...

6.5CVSS6AI score0.00022EPSS
Exploits0References8Affected Software1
EUVD
EUVD
added 2026/04/05 12:30 p.m.2 views

EUVD-2026-19066

A vulnerability has been found in AntaresMugisho PyBlade 0.1.8-alpha/0.1.9-alpha. The affected element is the function issafeast of the file sandbox.py of the component AST Validation. Such manipulation leads to improper neutralization of special elements used in a template engine. The attack may...

6.5CVSS6AI score0.00022EPSS
Exploits0References7
ATTACKERKB
ATTACKERKB
added 2026/04/05 10:15 a.m.2 views

CVE-2026-5559

A vulnerability has been found in AntaresMugisho PyBlade 0.1.8-alpha/0.1.9-alpha. The affected element is the function issafeast of the file sandbox.py of the component AST Validation. Such manipulation leads to improper neutralization of special elements used in a template engine. The attack may...

6.5CVSS6AI score0.00022EPSS
Exploits0References6
OSV
OSV
added 2026/03/06 11:59 p.m.4 views

GHSA-8W32-6MRW-Q5WV WeKnora Vulnerable to Remote Code Execution via SQL Injection Bypass in AI Database Query Tool

Summary A critical Remote Code Execution RCE vulnerability exists in the application's database query functionality. The validation system fails to recursively inspect child nodes within PostgreSQL array expressions and row expressions, allowing attackers to bypass SQL injection protections. By...

10CVSS6.5AI score0.0024EPSS
Exploits1References3
Rows per page
Query Builder