PT-2026-63986

Name of the Vulnerable Software and Affected Versions DOMPurify versions 3.0.0 through 3.4.7 Description When configured with SAFE FOR TEMPLATES and a DOM output mode RETURN DOM, RETURN DOM FRAGMENT, or IN PLACE, the software fails to strip template expressions such as $evil, evil, or within...

CVE-2026-5559

A vulnerability has been found in AntaresMugisho PyBlade 0.1.8-alpha/0.1.9-alpha. The affected element is the function issafeast of the file sandbox.py of the component AST Validation. Such manipulation leads to improper neutralization of special elements used in a template engine. The attack may...

Security Bulletin: IBM Watson Discovery Cartridge affected by vulnerability in jinja2-3.1.5-py3-none-any.whl

Summary IBM Watson Discovery Cartridge contains a vulnerable version of jinja2-3.1.5-py3-none-any.whl Vulnerability Details CVEID:CVE-2025-27516 DESCRIPTION: Jinja is an extensible templating engine. Prior to 3.1.6, an oversight in how the Jinja sandboxed environment interacts with the |attr filt...