Skip to content
Threat Feed

Product

Banks (<= 2.4.1)

1 brief RSS
high advisory

banks Library Vulnerable to Server-Side Template Injection Leading to Remote Code Execution

banks version 2.4.1 and earlier is vulnerable to Server-Side Template Injection (SSTI) due to the use of an unsandboxed Jinja2 environment, allowing attackers to achieve Remote Code Execution (RCE) by injecting malicious code through user-supplied prompt templates.

banks ssti rce jinja2
2r 2t 2c