Jangwoo Choe

Server side template inject (SSTI) in the expression evaluation component allows a remote attacker to achieve remote code execution (RCE) via crafted template expressions. SSTI occurs when an attacker is able to inject malicious code into a template that is then executed on the server.

A path traversal and arbitrary file write issue exists in the `get` function within the ' main .py' file. The issue allows unauthorized access and modification of files.