#template injection

ash_ai's CVSS 10.0 Runs Prompt Text Through Elixir's Templates

The documented way of writing a prompt compiles attacker-supplied text as code — and the only fixed version is a major release that leads with a breaking change.

2h ago