[ Vendor · 2 CVEs ]
masci
CVEs affecting masci published in the last 30 days, plus any masci CVE on CISA's exploited list.
| CVE | Published | Severity | Vulnerability | Signals |
|---|---|---|---|---|
| CVE-2026-107716 | 8 Oct 2026 | CVSS 7.3 | Banks: Symlink traversal and arbitrary file disclosure/overwrite in DirectoryPromptRegistryBanks generates meaningful LLM prompts using a simple template language. Prior to 2.5.1, Banks DirectoryPromptRegistry does not reject symbolic links… | Fix |
| CVE-2026-107717 | 8 Oct 2026 | CVSS 6.5 | Banks: User-controlled prompt input can be parsed as privileged chat messagesBanks generates meaningful LLM prompts using a simple template language. Prior to 2.5.0, Banks Prompt.chat_messages() attempts to parse every line of… | Fix |