| Summary | Lack of user input sanitisation in Open Notebook v1.8.3 allows the application user to execute Python code (and subsequently OS commands) on the docker container via Server-Side Template Injection (SSTI) for user-created transformations. |
|---|---|
| Publication Date | May 7, 2026, 8:16 p.m. |
| Registration Date | May 8, 2026, 4:09 a.m. |
| Last Update | May 7, 2026, 11:51 p.m. |