EUVD-2022-3409

Malicious code in bioql PyPI...

Code injection

Smarty 3 before 3.1.32 is vulnerable to a PHP code injection when calling fetch or display functions on custom resources that does not sanitize template name...