{"action":"Upgrade banks to 2.4.2 or later.","affected":[{"fixed":"2.4.2","introduced":"0"}],"component":"banks","cve_ids":["CVE-2026-44209"],"ecosystem":"PyPI","epss":0.00423,"exploited":false,"fixed_versions":["2.4.2"],"ghsa_id":"GHSA-gphh-9q3h-jgpp","id":"tcs_01M5KGZ64WQKNPSF3WW283P2GK","modified_at":"2026-07-13T16:31:32.347040930Z","published_at":"2026-07-13T15:15:42.685111Z","references":["https://osv.dev/vulnerability/PYSEC-2026-2390","https://github.com/masci/banks/security/advisories/GHSA-gphh-9q3h-jgpp","https://nvd.nist.gov/vuln/detail/CVE-2026-44209","https://github.com/masci/banks/pull/74","https://github.com/masci/banks","https://pypi.org/project/banks","https://github.com/advisories/GHSA-gphh-9q3h-jgpp"],"severity":{"label":"high","score":7.5},"sources":[{"source":"osv","source_id":"PYSEC-2026-2390","url":"https://osv.dev/vulnerability/PYSEC-2026-2390"}],"summary":"banks has Critical Remote Code Execution (RCE) via Jinja2 SSTI"}