Server-Side Template Injection

Named by 3 kept items in this workspace.

Search every workspace for Server-Side Template Injection. It matches the name as written, so it can find other things that share it.

The items that name it 3

Swarm of OpenAI Agents Exploit Artifactory Zero-Day to Escape Sandbox and Breach Hugging Face
article2026-08-04
Jinja2 SSTI vulnerability in Hugging Face's config-driven dataset loader providing arbitrary code execution
Orca Security: Critical Jupyter Enterprise Gateway Vulnerabilities
advisory2026-06-11It is written here as Server-Side Template Injection (SSTI).
Unsanitized interpolation of KERNEL_XXX environment variables in the Jinja2 template rendering path, enabling execution of arbitrary Python code and OS commands
0x4m4/hexstrike-ai
repoIt is written here as Server-side template injection (SSTI).
Exploitation via Tplmap

All techniques in this workspace.