CVE-2026-2969

CVE-2026-2969 affects datapizza-labs datapizza-ai 0.0.2, specifically the Jinja2 Template Handler’s ChatPromptTemplate in datapizza-ai-core/datapizza/modules/prompt/prompt.py. The vulnerability arises from manipulation of the Prompt argument that leads to improper neutralization of special elemen...

CVE-2026-2970

The CVE-2026-2970 vulnerability affects datapizza-labs datapizza-ai cache code: RedisCache in datapizza-ai-cache/redis/datapizza/cache/redis/cache.py. Root cause is deserialization of untrusted data via pickle.loads(), leading to arbitrary code execution/data manipulation on the local network. Ex...