Skip to content
OpenAdvisories

Product · wbond

pybars3

1 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • Critical 9.8
    CVE-2026-119716

    pybars3 through 0.9.7 and pybars4 through 0.9.13 Code Injection via Bracketed Path Segments

    pybars3 through 0.9.7 and pybars4 through 0.9.13 contain a code injection vulnerability in pybars/_compiler.py that allows template authors to execute Python code via unescaped bracketed path segments. Attackers can supply Handlebars templates with crafted se…

    wbond up9inc pybars3 pybars4