Skip to main content
cve.nowby Sazabi
← PyPI
PyPIPackage

banks

5 known vulnerabilities (3 high, 2 medium), with the versions each affects and the releases that fix them.

Latest release
2.5.1 (Sep 10, 2026): no advisory affects it
Newest unaffected release
2.5.1 (Sep 10, 2026), the latest release
Advisories
5 · 3 high, 2 medium
Weekly downloads
1.2M
Dependents
1,468
Releases
38 since 0.0.1 (Jun 4, 2023)
Registry
PyPI
Releases read
Nov 8, 2026

Version timeline

Every release cve.now has on record, lowest version on the left; each bar is a run of versions an advisory affects.

Advisories 5

  • CVE-2026-107717Medium 6.5

    Banks: User-controlled prompt input can be parsed as privileged chat messages

    Affected: fixed in 2.5.0.

    Fixed in 2.5.0 (released Aug 8, 2026, 61 days before disclosure).

    The latest release, 2.5.1, is not affected.

  • Banks: Symlink traversal and arbitrary file disclosure/overwrite in DirectoryPromptRegistry

    Affected: fixed in 2.5.1.

    Fixed in 2.5.1 (released Sep 10, 2026, 28 days before disclosure).

    The latest release, 2.5.1, is not affected.

  • CVE-2026-71492Medium 6.0

    Banks: Path traversal in `DirectoryPromptRegistry.set()` allows arbitrary file write outside the registry root

    Affected: fixed in 2.4.5.

    Fixed in 2.4.5 (released Jul 7, 2026, 44 days before disclosure).

    The latest release, 2.5.1, is not affected.

  • Banks: Unsafe importlib.import_module of attacker-controlled Tool.import_path in CompletionExtension allows RCE

    Affected: fixed in 2.4.3.

    Fixed in 2.4.3 (released Jun 18, 2026, 42 days before disclosure).

    The latest release, 2.5.1, is not affected.

  • Banks: Critical Remote Code Execution (RCE) via Jinja2 SSTI

    Affected: fixed in 2.4.2.

    Fixed in 2.4.2 (released Apr 27, 2026, 29 days before disclosure).

    The latest release, 2.5.1, is not affected.