VYPR

pybars3

by Wbond

CVEs (1)

  • CVE-2026-119716HigOct 30, 2026
    risk 0.53cvss 8.1epss —

    pybars3 through 0.9.7 contains a code injection vulnerability in pybars/_compiler.py that allows template authors to execute Python code via unescaped bracketed path segments. Attackers can supply Handlebars templates with crafted segments in helper or block arguments to break…