Skip to content

v0.7.3: Sandbox Jinja to prevent code execution from untrusted configs

Latest
Compare
Choose a tag to compare
@github-actions github-actions released this 13 Jan 12:11
· 0 commits to main since this release

The jinja templating library allows arbitrary code execution unless run within a sandbox. This could allow arbitrary code execution if an untrusted config file were used to load the pipeline.