Advisories for Pypi/Document-Merge-Service package

What kind of vulnerability is it? Who is impacted? RCE via SSTI, as root, full takeover.