Search
Find a vulnerability
Search criteria
2 vulnerabilities found for pybars3 by wbond
CVE-2026-119716 (GCVE-0-2026-119716)
Vulnerability from nvd – Published: 2026-10-30 15:16 – Updated: 2026-10-30 15:16 Unsupported When Assigned
VLAI
EPSS
VEX
Title
pybars3 through 0.9.7 Code Injection via Bracketed Path Segments
Summary
pybars3 through 0.9.7 contains a code injection vulnerability in pybars/_compiler.py that allows template authors to execute Python code via unescaped bracketed path segments. Attackers can supply Handlebars templates with crafted segments in helper or block arguments to break out of string literals and execute Python in the application process.
Severity
8.1 (High)
CWE
- CWE-94 - Improper Control of Generation of Code ('Code Injection')
Assigner
References
5 references
| URL | Tags |
|---|---|
| https://github.com/wbond/pybars3/issues/88 | issue-tracking |
| https://github.com/wbond/pybars3 | product |
| https://github.com/vladko312/advisories/blob/702e… | third-party-advisory |
| https://github.com/wbond/pybars3/blob/0.9.7/pybar… | technical-description |
| https://www.vulncheck.com/advisories/pybars3-thro… | third-party-advisory |
Date Public
2026-07-01 00:00
{
"containers": {
"cna": {
"affected": [
{
"defaultStatus": "unaffected",
"packageURL": "pkg:pypi/pybars3",
"product": "pybars3",
"vendor": "wbond",
"versions": [
{
"lessThanOrEqual": "0.9.7",
"status": "affected",
"version": "0",
"versionType": "semver"
}
]
}
],
"credits": [
{
"lang": "en",
"type": "finder",
"value": "Vladislav Korchagin"
}
],
"datePublic": "2026-07-01T00:00:00.000Z",
"descriptions": [
{
"lang": "en",
"value": "pybars3 through 0.9.7 contains a code injection vulnerability in pybars/_compiler.py that allows template authors to execute Python code via unescaped bracketed path segments. Attackers can supply Handlebars templates with crafted segments in helper or block arguments to break out of string literals and execute Python in the application process."
}
],
"metrics": [
{
"cvssV4_0": {
"attackComplexity": "HIGH",
"attackRequirements": "PRESENT",
"attackVector": "NETWORK",
"baseScore": 9.2,
"baseSeverity": "CRITICAL",
"privilegesRequired": "NONE",
"subAvailabilityImpact": "NONE",
"subConfidentialityImpact": "NONE",
"subIntegrityImpact": "NONE",
"userInteraction": "NONE",
"vectorString": "CVSS:4.0/AV:N/AC:H/AT:P/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N",
"version": "4.0",
"vulnAvailabilityImpact": "HIGH",
"vulnConfidentialityImpact": "HIGH",
"vulnIntegrityImpact": "HIGH"
},
"format": "CVSS"
},
{
"cvssV3_1": {
"attackComplexity": "HIGH",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 8.1,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"format": "CVSS"
}
],
"problemTypes": [
{
"descriptions": [
{
"cweId": "CWE-94",
"description": "Improper Control of Generation of Code (\u0027Code Injection\u0027)",
"lang": "en",
"type": "CWE"
}
]
}
],
"providerMetadata": {
"dateUpdated": "2026-10-30T15:16:14.237Z",
"orgId": "83251b91-4cc7-4094-a5c7-464a1b83ea10",
"shortName": "VulnCheck"
},
"references": [
{
"name": "GitHub Issue #88",
"tags": [
"issue-tracking"
],
"url": "https://github.com/wbond/pybars3/issues/88"
},
{
"tags": [
"product"
],
"url": "https://github.com/wbond/pybars3"
},
{
"tags": [
"third-party-advisory"
],
"url": "https://github.com/vladko312/advisories/blob/702e98db9642ece70d9e2150076d8014ffec2db3/pybars3.md"
},
{
"tags": [
"technical-description"
],
"url": "https://github.com/wbond/pybars3/blob/0.9.7/pybars/_compiler.py#L159-L160"
},
{
"name": "VulnCheck Advisory: pybars3 through 0.9.7 Code Injection via Bracketed Path Segments",
"tags": [
"third-party-advisory"
],
"url": "https://www.vulncheck.com/advisories/pybars3-through-0.9.7-code-injection-via-bracketed-path-segments"
}
],
"tags": [
"unsupported-when-assigned"
],
"title": "pybars3 through 0.9.7 Code Injection via Bracketed Path Segments",
"x_generator": {
"engine": "vulncheck-endgame"
}
}
},
"cveMetadata": {
"assignerOrgId": "83251b91-4cc7-4094-a5c7-464a1b83ea10",
"assignerShortName": "VulnCheck",
"cveId": "CVE-2026-119716",
"datePublished": "2026-10-30T15:16:14.237Z",
"dateReserved": "2026-10-30T14:49:27.152Z",
"dateUpdated": "2026-10-30T15:16:14.237Z",
"state": "PUBLISHED"
},
"dataType": "CVE_RECORD",
"dataVersion": "5.2"
}
CVE-2026-119716 (GCVE-0-2026-119716)
Vulnerability from cvelistv5 – Published: 2026-10-30 15:16 – Updated: 2026-10-30 15:16 Unsupported When Assigned
VLAI
EPSS
VEX
Title
pybars3 through 0.9.7 Code Injection via Bracketed Path Segments
Summary
pybars3 through 0.9.7 contains a code injection vulnerability in pybars/_compiler.py that allows template authors to execute Python code via unescaped bracketed path segments. Attackers can supply Handlebars templates with crafted segments in helper or block arguments to break out of string literals and execute Python in the application process.
Severity
8.1 (High)
CWE
- CWE-94 - Improper Control of Generation of Code ('Code Injection')
Assigner
References
5 references
| URL | Tags |
|---|---|
| https://github.com/wbond/pybars3/issues/88 | issue-tracking |
| https://github.com/wbond/pybars3 | product |
| https://github.com/vladko312/advisories/blob/702e… | third-party-advisory |
| https://github.com/wbond/pybars3/blob/0.9.7/pybar… | technical-description |
| https://www.vulncheck.com/advisories/pybars3-thro… | third-party-advisory |
Date Public
2026-07-01 00:00
{
"containers": {
"cna": {
"affected": [
{
"defaultStatus": "unaffected",
"packageURL": "pkg:pypi/pybars3",
"product": "pybars3",
"vendor": "wbond",
"versions": [
{
"lessThanOrEqual": "0.9.7",
"status": "affected",
"version": "0",
"versionType": "semver"
}
]
}
],
"credits": [
{
"lang": "en",
"type": "finder",
"value": "Vladislav Korchagin"
}
],
"datePublic": "2026-07-01T00:00:00.000Z",
"descriptions": [
{
"lang": "en",
"value": "pybars3 through 0.9.7 contains a code injection vulnerability in pybars/_compiler.py that allows template authors to execute Python code via unescaped bracketed path segments. Attackers can supply Handlebars templates with crafted segments in helper or block arguments to break out of string literals and execute Python in the application process."
}
],
"metrics": [
{
"cvssV4_0": {
"attackComplexity": "HIGH",
"attackRequirements": "PRESENT",
"attackVector": "NETWORK",
"baseScore": 9.2,
"baseSeverity": "CRITICAL",
"privilegesRequired": "NONE",
"subAvailabilityImpact": "NONE",
"subConfidentialityImpact": "NONE",
"subIntegrityImpact": "NONE",
"userInteraction": "NONE",
"vectorString": "CVSS:4.0/AV:N/AC:H/AT:P/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N",
"version": "4.0",
"vulnAvailabilityImpact": "HIGH",
"vulnConfidentialityImpact": "HIGH",
"vulnIntegrityImpact": "HIGH"
},
"format": "CVSS"
},
{
"cvssV3_1": {
"attackComplexity": "HIGH",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 8.1,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"format": "CVSS"
}
],
"problemTypes": [
{
"descriptions": [
{
"cweId": "CWE-94",
"description": "Improper Control of Generation of Code (\u0027Code Injection\u0027)",
"lang": "en",
"type": "CWE"
}
]
}
],
"providerMetadata": {
"dateUpdated": "2026-10-30T15:16:14.237Z",
"orgId": "83251b91-4cc7-4094-a5c7-464a1b83ea10",
"shortName": "VulnCheck"
},
"references": [
{
"name": "GitHub Issue #88",
"tags": [
"issue-tracking"
],
"url": "https://github.com/wbond/pybars3/issues/88"
},
{
"tags": [
"product"
],
"url": "https://github.com/wbond/pybars3"
},
{
"tags": [
"third-party-advisory"
],
"url": "https://github.com/vladko312/advisories/blob/702e98db9642ece70d9e2150076d8014ffec2db3/pybars3.md"
},
{
"tags": [
"technical-description"
],
"url": "https://github.com/wbond/pybars3/blob/0.9.7/pybars/_compiler.py#L159-L160"
},
{
"name": "VulnCheck Advisory: pybars3 through 0.9.7 Code Injection via Bracketed Path Segments",
"tags": [
"third-party-advisory"
],
"url": "https://www.vulncheck.com/advisories/pybars3-through-0.9.7-code-injection-via-bracketed-path-segments"
}
],
"tags": [
"unsupported-when-assigned"
],
"title": "pybars3 through 0.9.7 Code Injection via Bracketed Path Segments",
"x_generator": {
"engine": "vulncheck-endgame"
}
}
},
"cveMetadata": {
"assignerOrgId": "83251b91-4cc7-4094-a5c7-464a1b83ea10",
"assignerShortName": "VulnCheck",
"cveId": "CVE-2026-119716",
"datePublished": "2026-10-30T15:16:14.237Z",
"dateReserved": "2026-10-30T14:49:27.152Z",
"dateUpdated": "2026-10-30T15:16:14.237Z",
"state": "PUBLISHED"
},
"dataType": "CVE_RECORD",
"dataVersion": "5.2"
}