Trestle SSTI in Jinja2 include tags allows arbitrary code execution (Incomplete fix of CVE-2026-46439)
1. Executive summary A public advisory published on 2026-09-24 describes a server-side template injection flaw in compliance-trestle that survives the fix for
24 Sep 2026 · 9 min read
read →