TI-2026-69696 CVE-2026-107717 · GHSA-hmq2-7hp6-7crh
Banks parses untrusted prompt input as privileged chat messages
Priority HIGH 68
Banks generates meaningful LLM prompts using a simple template language.
Vulnerabilities
6 records
TI-2026-69682 CVE-2026-107716 · GHSA-556j-vv39-8rqv
Symlink traversal in Banks DirectoryPromptRegistry
Priority LOW 31
Banks generates meaningful LLM prompts using a simple template language.
TI-2026-50100 CVE-2026-71492 · GHSA-x8wg-4xgc-vr54
Banks: Path traversal in `DirectoryPromptRegistry.set()` allows arbitrary file write outside the registry root
Priority MEDIUM 60
Banks generates meaningful LLM prompts using a simple template language.
TI-2026-44099 CVE-2026-61536 · GHSA-64vx-6h2c-rjh7
Banks: Unsafe importlib.import_module of attacker-controlled Tool.import_path in CompletionExtension allows RCE
Priority HIGH 68
Banks generates meaningful LLM prompts using a simple template language.
TI-2026-44773 CVE-2026-62663
Banks: Arbitrary File Read via Path Traversal in Media Filters (image/audio/video/document)
Priority HIGH 72
Banks generates meaningful LLM prompts using a simple template language.
TI-2026-32188 CVE-2026-44209 · GHSA-gphh-9q3h-jgpp
Banks: Critical Remote Code Execution (RCE) via Jinja2 SSTI
Priority HIGH 68
Banks generates meaningful LLM prompts using a template language that makes sense.