Vendor
Skyvern-AI
2 known vulnerabilities.
Products
2 results · Clear filters · Feed
-
High 8.8
Skyvern through 1.0.56 Script Sandbox Bypass via types.CodeType Bytecode
Skyvern through 1.0.56 contains a sandbox bypass vulnerability that allows authenticated users to execute code by reconstructing functions from raw bytecode with types.CodeType. Attackers can deploy scripts that evade the is_safe_script_code AST denylist and …
-
High 8.8
Skyvern before 1.0.45 Sandbox Escape via TextPromptBlock
Skyvern before 1.0.45 contains a sandbox escape vulnerability in TextPromptBlock that renders prompts twice, first through a sandboxed Jinja environment and then through an unsandboxed environment. Attackers can inject malicious Jinja template syntax through …