Jinja2 Server-Side Template Injection
Named by 2 kept items in this workspace.
1 items name it under classification.key entities and 1 under techniques.
Search every workspace for Jinja2 Server-Side Template Injection. It matches the name as written, so it can find other things that share it.
The items that name it 2
Unsandboxed Jinja2 Environment allowed remote dataset loaders to pass fetched data into SeedPrompt(value=...), rendered as a template, enabling Python object traversal via poisoned datasets; fixed in v0.12.1/v0.13.0
All techniques in this workspace.