CVE-2026-119717

Versions pybars4 through 0.9.13 are vulnerable to a code injection flaw located in pybars/_compiler.py. The issue stems from the handling of unescaped bracketed path segments in Handlebars templates. An attacker can provide a template containing a crafted segment within a helper or block argument...