CVE-2026-5559
AntaresMugisho PyBlade AST Validation sandbox.py _is_safe_ast special elements used in a template engine
CVSS Score
6.3
EPSS Score
0.0%
EPSS Percentile
4th
A vulnerability has been found in AntaresMugisho PyBlade 0.1.8-alpha/0.1.9-alpha. The affected element is the function _is_safe_ast of the file sandbox.py of the component AST Validation. Such manipulation leads to improper neutralization of special elements used in a template engine. The attack may be performed from remote. The exploit has been disclosed to the public and may be used. The project was informed of the problem early through an issue report but has not responded yet.
| CWE | CWE-1336 CWE-791 |
| Vendor | antaresmugisho |
| Product | pyblade |
| Published | Apr 5, 2026 |
| Last Updated | Apr 6, 2026 |
Stay Ahead of the Next One
Get instant alerts for antaresmugisho pyblade
Be the first to know when new medium vulnerabilities affecting antaresmugisho pyblade are published — delivered to Slack, Telegram or Discord.
Get Free Alerts →
Free · No credit card · 60 sec setup
CVSS v3 Breakdown
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L/E:P/RL:X/RC:R Attack Vector
Attack Complexity
Privileges Required
User Interaction
Scope
Confidentiality
Integrity
Availability
Affected Versions
AntaresMugisho / PyBlade
0.1.8-alpha 0.1.9-alpha
References
vuldb.com: https://vuldb.com/vuln/355329 vuldb.com: https://vuldb.com/vuln/355329/cti vuldb.com: https://vuldb.com/submit/782904 github.com: https://github.com/AntaresMugisho/PyBlade/issues/1 github.com: https://github.com/AntaresMugisho/PyBlade/issues/1#issue-4086730906 github.com: https://github.com/AntaresMugisho/PyBlade/
Credits
🔍 zhangxinyu06 (VulDB User) VulDB CNA Team