Poisoned chat template escapes the Jinja sandbox through a memory bug in Python itself https://ochtendkrant.be/en/2026-11-07/cpython-geheugenfout-jinja-sandbox-ai-servers