{"data":{"id":"fecc9365-42bf-48ff-958c-3284c8c3e535","title":"GHSA-gphh-9q3h-jgpp: banks has Critical Remote Code Execution (RCE) via Jinja2 SSTI","summary":"banks versions up to and including 2.4.1 render prompt templates with an unsandboxed jinja2.Environment() in src/banks/env.py. Applications that pass user-supplied strings as the template argument to Prompt() are exposed to Server-Side Template Injection, which can lead to Remote Code Execution on the host.","solution":"Fixed in banks 2.4.2 (PR #74), which switches to jinja2.sandbox.SandboxedEnvironment. Developers on banks <= 2.4.1 should upgrade to 2.4.2 and avoid passing untrusted user input as the template argument to Prompt().","labels":["security"],"sourceUrl":"https://github.com/advisories/GHSA-gphh-9q3h-jgpp","publishedAt":"2026-05-08T20:36:22.000Z","cveId":"CVE-2026-44209","cweIds":null,"cvssScore":null,"cvssSeverity":"high","severity":"high","attackType":["other"],"issueType":"vulnerability","affectedPackages":["banks@<= 2.4.1 (fixed: 2.4.2)"],"affectedPackageNames":["banks"],"affectedPackageRefs":["pypi:banks"],"affectedVendors":[],"affectedVendorsRaw":["banks"],"classifierModel":"claude-haiku-5-5","classifierPromptVersion":"v4","summaryPromptVersion":"v2","headline":null,"headlinePromptVersion":null,"cvssVector":null,"attackVector":null,"attackComplexity":null,"privilegesRequired":null,"userInteraction":null,"exploitMaturity":"unknown","epssScore":0.00423,"epssCheckedAt":"2026-11-08T00:10:11.365Z","kevDateAdded":null,"advisoryAliases":["GHSA-gphh-9q3h-jgpp"],"affectedPackagesSource":null,"affectedPackagesCheckedAt":null,"patchAvailable":true,"disclosureDate":"2026-05-08T20:36:22.000Z","fixReleasedAt":"2026-04-27T12:15:20.785Z","daysToFix":-11,"fixCheckedAt":"2026-10-29T21:36:38.666Z","capecIds":null,"crossRefCount":0,"attackSophistication":"trivial","impactType":["confidentiality","integrity","availability"],"aiComponentTargeted":"framework","llmSpecific":false,"classifierConfidence":0.85,"researchCategory":null,"atlasIds":null,"fixes":[{"ecosystem":"pypi","name":"banks","fixedVersion":"2.4.2","matchedVersion":"2.4.2","fixReleasedAt":"2026-04-27T12:15:20.785Z","daysToFix":-11,"match":"ecosystem","source":"tracked","status":"found","checkedAt":"2026-10-29T21:36:38.520Z"}]}}