Product
The pybars4 library through 0.9.13 contains a code injection vulnerability in pybars/_compiler.py that allows execution of Python code via unescaped bracketed path segments in Handlebars templates.