Ssti
- Template Fury
A Jinja2 SSTI with builtins blacklisted by name, bypassed by spelling every blocked word with hex escapes.
- Lost Pyramid
SSTI leaked the values needed to forge a JWT, and pyjwt’s default algorithm set let the public key double as an HMAC secret.