CVE-2026-119716

pybars3 through 0.9.7 contains a code injection vulnerability in pybars/compiler.py that allows template authors to execute Python code via unescaped bracketed path segments. Attackers can supply Handlebars templates with crafted segments in helper or block arguments to break out of string litera...

CVE-2026-119716 pybars3 through 0.9.7 Code Injection via Bracketed Path Segments

pybars3 through 0.9.7 contains a code injection vulnerability in pybars/compiler.py that allows template authors to execute Python code via unescaped bracketed path segments. Attackers can supply Handlebars templates with crafted segments in helper or block arguments to break out of string litera...

CVE-2026-119716

The pybars3 library (versions through 0.9.7 ) is vulnerable to a code injection flaw located in pybars/_compiler.py. The root cause is the handling of unescaped bracketed path segments , which allows template authors to execute arbitrary Python code . By providing crafted segments within Handleba...

EUVD-2026-114121

pybars3 through 0.9.7 contains a code injection vulnerability in pybars/compiler.py that allows template authors to execute Python code via unescaped bracketed path segments. Attackers can supply Handlebars templates with crafted segments in helper or block arguments to break out of string litera...

CVE-2026-119716: wbond pybars3: pybars3 through 0.9.7 contains a code injection vulnerability in pybars/_compiler.py that allows template authors to…

pybars3 through 0.9.7 contains a code injection vulnerability in pybars/compiler.py that allows template authors to execute Python code via unescaped bracketed path segments. Attackers can supply Handlebars templates with crafted segments in helper or block arguments to break out of string litera...