pybars4 vulnerabilities

CVEs whose affected-version data names the pybars4 package. Each record lists the affected and patched versions; check a specific version with the dependency checker or POST /api/sbom.

1 CVERSS

CVE-2026-119716Critical· 9.8

1w ago

pybars3 through 0.9.7 and pybars4 through 0.9.13 Code Injection via Bracketed Path Segments

pybars3 through 0.9.7 and pybars4 through 0.9.13 contain a code injection vulnerability in pybars/_compiler.py that allows template authors to execute Python code via unescaped bracketed path segments. Attackers can supply Handlebars tem…

▾ Midnightwbond · pybars3EPSS 0.46%via CVEORG