banks vulnerabilities (PyPI)
4 vulnerabilities.
-
banksPyPI Banks: User-controlled prompt input can be parsed as privileged chat messages 6.5 Medium -
banksPyPI Banks: Symlink traversal and arbitrary file disclosure/overwrite in DirectoryPromptRegistry 7.3 High -
banksPyPI Banks: Path traversal in `DirectoryPromptRegistry.set()` allows arbitrary file write outside the registry root 6.0 Medium -
banksPyPI Banks: Critical Remote Code Execution (RCE) via Jinja2 SSTI 7.5 High