Masci Banks vulnerabilities
- masci banksBanks: User-controlled prompt input can be parsed as privileged chat messages6.5 Medium
- masci banksBanks: Symlink traversal and arbitrary file disclosure/overwrite in DirectoryPromptRegistry7.3 High
- masci banksBanks: Path traversal in `DirectoryPromptRegistry.set()` allows arbitrary file write outside the registry root6.0 Medium
- masci banksBanks: Unsafe importlib.import_module of attacker-controlled Tool.import_path in CompletionExtension allows RCE7.5 High
- masci banksBanks: Arbitrary File Read via Path Traversal in Media Filters (image/audio/video/document)7.5 High
- masci banks, red hat exploit intelligence, openshift lightspeed +1 more +3 moreBanks: Critical Remote Code Execution (RCE) via Jinja2 SSTI7.5 High