Refine your search

2 vulnerabilities found for by up9inc

CVE-2026-119717 (GCVE-0-2026-119717)
Vulnerability from cvelistv5

This CVE ID has been rejected as a duplicate.

Replaced by CVE-2026-119716

Show details on NVD website

To clipboard 

{
  "containers": {
    "cna": {
      "providerMetadata": {
        "dateUpdated": "2026-11-02T20:51:00.976Z",
        "orgId": "83251b91-4cc7-4094-a5c7-464a1b83ea10",
        "shortName": "VulnCheck"
      },
      "rejectedReasons": [
        {
          "lang": "en",
          "value": "This CVE ID has been rejected as a duplicate."
        }
      ],
      "replacedBy": [
        "CVE-2026-119716"
      ]
    }
  },
  "cveMetadata": {
    "assignerOrgId": "83251b91-4cc7-4094-a5c7-464a1b83ea10",
    "assignerShortName": "VulnCheck",
    "cveId": "CVE-2026-119717",
    "datePublished": "2026-10-30T15:16:14.963Z",
    "dateRejected": "2026-11-02T20:51:00.976Z",
    "dateReserved": "2026-10-30T14:49:27.542Z",
    "dateUpdated": "2026-11-02T20:51:00.976Z",
    "state": "REJECTED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.2"
}

CVE-2026-119716 (GCVE-0-2026-119716)
Vulnerability from cvelistv5
Published
2026-10-30 15:16
Modified
2026-11-02 20:53
Severity ?
9.3 (Critical) - CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N
9.8 (Critical) - CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
CWE
  • CWE-94 - Improper Control of Generation of Code ('Code Injection')
Summary
pybars3 through 0.9.7 and pybars4 through 0.9.13 contain a code injection vulnerability in pybars/_compiler.py that allows template authors to execute Python code via unescaped bracketed path segments. Attackers can supply Handlebars templates with crafted segments in helper or block arguments to break out of string literals and execute Python in the application process.
References
Impacted products
Vendor Product Version
wbond pybars3 Version: 0   ≤ 0.9.7
 Create a notification for this product.
Show details on NVD website

To clipboard 

{
  "containers": {
    "cna": {
      "affected": [
        {
          "defaultStatus": "unaffected",
          "packageURL": "pkg:pypi/pybars3",
          "product": "pybars3",
          "vendor": "wbond",
          "versions": [
            {
              "lessThanOrEqual": "0.9.7",
              "status": "affected",
              "version": "0",
              "versionType": "semver"
            }
          ]
        },
        {
          "defaultStatus": "unaffected",
          "packageURL": "pkg:pypi/pybars4",
          "product": "pybars4",
          "vendor": "up9inc",
          "versions": [
            {
              "lessThanOrEqual": "0.9.13",
              "status": "affected",
              "version": "0",
              "versionType": "semver"
            }
          ]
        }
      ],
      "credits": [
        {
          "lang": "en",
          "type": "finder",
          "value": "Vladislav Korchagin"
        }
      ],
      "datePublic": "2026-07-01T00:00:00.000Z",
      "descriptions": [
        {
          "lang": "en",
          "value": "pybars3 through 0.9.7 and pybars4 through 0.9.13 contain a code injection vulnerability in pybars/_compiler.py that allows template authors to execute Python code via unescaped bracketed path segments. Attackers can supply Handlebars templates with crafted segments in helper or block arguments to break out of string literals and execute Python in the application process."
        }
      ],
      "metrics": [
        {
          "cvssV4_0": {
            "attackComplexity": "LOW",
            "attackRequirements": "NONE",
            "attackVector": "NETWORK",
            "baseScore": 9.3,
            "baseSeverity": "CRITICAL",
            "privilegesRequired": "NONE",
            "subAvailabilityImpact": "NONE",
            "subConfidentialityImpact": "NONE",
            "subIntegrityImpact": "NONE",
            "userInteraction": "NONE",
            "vectorString": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N",
            "version": "4.0",
            "vulnAvailabilityImpact": "HIGH",
            "vulnConfidentialityImpact": "HIGH",
            "vulnIntegrityImpact": "HIGH"
          },
          "format": "CVSS"
        },
        {
          "cvssV3_1": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "HIGH",
            "baseScore": 9.8,
            "baseSeverity": "CRITICAL",
            "confidentialityImpact": "HIGH",
            "integrityImpact": "HIGH",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "version": "3.1"
          },
          "format": "CVSS"
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "cweId": "CWE-94",
              "description": "Improper Control of Generation of Code (\u0027Code Injection\u0027)",
              "lang": "en",
              "type": "CWE"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2026-11-02T20:53:40.920Z",
        "orgId": "83251b91-4cc7-4094-a5c7-464a1b83ea10",
        "shortName": "VulnCheck"
      },
      "references": [
        {
          "name": "GitHub Issue #88",
          "tags": [
            "issue-tracking"
          ],
          "url": "https://github.com/wbond/pybars3/issues/88"
        },
        {
          "tags": [
            "product"
          ],
          "url": "https://github.com/wbond/pybars3"
        },
        {
          "tags": [
            "product"
          ],
          "url": "https://github.com/up9inc/pybars4"
        },
        {
          "tags": [
            "third-party-advisory"
          ],
          "url": "https://github.com/vladko312/advisories/blob/702e98db9642ece70d9e2150076d8014ffec2db3/pybars3.md"
        },
        {
          "tags": [
            "technical-description"
          ],
          "url": "https://github.com/wbond/pybars3/blob/0.9.7/pybars/_compiler.py#L159-L160"
        },
        {
          "tags": [
            "technical-description"
          ],
          "url": "https://github.com/up9inc/pybars4/blob/0.9.13/pybars/_compiler.py#L153-L154"
        },
        {
          "name": "VulnCheck Advisory: pybars3 through 0.9.7 Code Injection via Bracketed Path Segments",
          "tags": [
            "third-party-advisory"
          ],
          "url": "https://www.vulncheck.com/advisories/pybars3-through-0.9.7-code-injection-via-bracketed-path-segments"
        }
      ],
      "tags": [
        "unsupported-when-assigned"
      ],
      "title": "pybars3 through 0.9.7 and pybars4 through 0.9.13 Code Injection via Bracketed Path Segments",
      "x_generator": {
        "engine": "vulncheck-endgame"
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "83251b91-4cc7-4094-a5c7-464a1b83ea10",
    "assignerShortName": "VulnCheck",
    "cveId": "CVE-2026-119716",
    "datePublished": "2026-10-30T15:16:14.237Z",
    "dateReserved": "2026-10-30T14:49:27.152Z",
    "dateUpdated": "2026-11-02T20:53:40.920Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.2"
}