The 9.1-CVSS vulnerability enables attackers to circumvent RCE protections in the de facto template engine for the Java Spring ecosystem.
The prompt-injection issue in the agentic AI product for filesystem operations was a sanitization issue that allowed for ...