# Code injection. Untrusted input evaluated as code: eval, templates, expression languages. Every Advisory and CVE whose weakness (CWE) is one of these, newest first. ## Records, newest first (an older page) - [welovemedia FFmate Webhook AppJsonTreeView.vue cross site scripting](https://agentprime.io/advisories/CVE-2026-5254.md) `CVE-2026-5254` · CVE record: welovemedia FFmate · CVSS 5.1 Medium · Not analysed yet · Published 1 Apr 2026 · Tags: Cross-site scripting (XSS), Code injection - [bufanyun HotGo editNotice Endpoint MessageList.vue cross site scripting](https://agentprime.io/advisories/CVE-2026-5253.md) `CVE-2026-5253` · CVE record: bufanyun HotGo · CVSS 5.1 Medium · Not analysed yet · Published 1 Apr 2026 · Tags: Cross-site scripting (XSS), Code injection - [z-9527 admin Message Create Endpoint message.js cross site scripting](https://agentprime.io/advisories/CVE-2026-5252.md) `CVE-2026-5252` · CVE record: z-9527 admin · CVSS 5.1 Medium · Not analysed yet · Published 1 Apr 2026 · Tags: Cross-site scripting (XSS), Code injection - [gougucms Record Endpoint record.html cross site scripting](https://agentprime.io/advisories/CVE-2026-5249.md) `CVE-2026-5249` · CVE record: gougucms · CVSS 5.1 Medium · Not analysed yet · Published 1 Apr 2026 · Tags: Cross-site scripting (XSS), Code injection - [XenForo Remote Code Execution via Authenticated Admin](https://agentprime.io/advisories/CVE-2026-35056.md) `CVE-2026-35056` · CVE record: XenForo XenForo · CVSS 8.6 High · Not analysed yet · Published 1 Apr 2026 · Tags: Code injection - [XenForo Template Method Call Restriction Bypass](https://agentprime.io/advisories/CVE-2025-71281.md) `CVE-2025-71281` · CVE record: XenForo XenForo · CVSS 8.7 High · Not analysed yet · Published 1 Apr 2026 · Tags: Code injection - [SiYuan Desktop: Stored XSS in imported .sy.zip content leads to arbitrary command execution](https://agentprime.io/advisories/GHSA-ff66-236v-p4fg.md) `GHSA-ff66-236v-p4fg`, `CVE-2026-34585`, `GO-2026-5357` · Go `github.com/siyuan-note/siyuan/kernel`: affected `<0.0.0-20260329142331-918d1bd9f967`, fixed in `0.0.0-20260329142331-918d1bd9f967` · CVSS 8.6 High · Not analysed yet · Published 1 Apr 2026 · Tags: Cross-site scripting (XSS), Code injection - [An issue was discovered in DedeCMS 5.7.118 allowing attackers to execute code via crafted setup tag values in a module upload.](https://agentprime.io/advisories/CVE-2026-30643.md) `CVE-2026-30643` · CVE record · CVSS 9.8 Critical · Critical (CVSS 9+) · Not analysed yet · Published 1 Apr 2026 · Tags: Code injection - [There is an injection vulnerability in jeecg boot versions 3.0.0 to 3.5.3 due to lax character filtering, which allows attackers to execute arbitrary code on components through specially crafted HTTP…](https://agentprime.io/advisories/CVE-2024-40489.md) `CVE-2024-40489` · CVE record · CVSS 9.8 Critical · Critical (CVSS 9+) · Not analysed yet · Published 1 Apr 2026 · Tags: Code injection - [code-projects BloodBank Managing System admin_state.php cross site scripting](https://agentprime.io/advisories/CVE-2026-5240.md) `CVE-2026-5240` · CVE record: code-projects BloodBank Managing System · CVSS 5.3 Medium · Not analysed yet · Published 31 Mar 2026 · Tags: Cross-site scripting (XSS), Code injection - [SiYuan: Stored XSS in Attribute View Gallery/Kanban Cover Rendering Allows Arbitrary Command Execution in Desktop Client](https://agentprime.io/advisories/GHSA-rx4h-526q-4458.md) `GHSA-rx4h-526q-4458`, `CVE-2026-34448`, `GO-2026-5644` · Go `github.com/siyuan-note/siyuan/kernel`: affected `<3.6.2`, fixed in `3.6.2` · CVSS 9.1 Critical · Critical (CVSS 9+) · Not analysed yet · Published 31 Mar 2026 · Tags: Cross-site scripting (XSS), Code injection - [SourceCodester Leave Application System User Management cross site scripting](https://agentprime.io/advisories/CVE-2026-5209.md) `CVE-2026-5209` · CVE record: SourceCodester Leave Application System · CVSS 4.8 Medium · Not analysed yet · Published 31 Mar 2026 · Tags: Cross-site scripting (XSS), Code injection - [Everest Forms Pro <= 1.9.12 - Unauthenticated Remote Code Execution via Calculation Field](https://agentprime.io/advisories/CVE-2026-3300.md) `CVE-2026-3300` · CVE record: WPEverest Everest Forms Pro · CVSS 9.8 Critical · Critical (CVSS 9+, CVSS 7+ and EPSS) · EPSS 0.39 · Not analysed yet · Published 31 Mar 2026 · Tags: Code injection - [code-projects Online Food Ordering System Order order.php cross site scripting](https://agentprime.io/advisories/CVE-2026-5157.md) `CVE-2026-5157` · CVE record: code-projects Online Food Ordering System · CVSS 5.3 Medium · Not analysed yet · Published 30 Mar 2026 · Tags: Cross-site scripting (XSS), Code injection - [Contact Form by Supsystic <= 1.7.36 - Unauthenticated Server-Side Template Injection via Prefill Functionality](https://agentprime.io/advisories/CVE-2026-4257.md) `CVE-2026-4257` · CVE record: supsysticcom Contact Form by Supsystic · CVSS 9.8 Critical · Critical (CVSS 9+, CVSS 7+ and EPSS) · EPSS 0.41 · Not analysed yet · Published 30 Mar 2026 · Tags: Code injection - [OpenOLAT: Server-Side Template Injection (SSTI) in Velocity templates allows Remote Code Execution](https://agentprime.io/advisories/CVE-2026-28228.md) `CVE-2026-28228` · CVE record: OpenOLAT OpenOLAT · CVSS 8.8 High · Not analysed yet · Published 30 Mar 2026 · Tags: Code injection - [Tautulli: RCE via eval() sandbox bypass using lambda nested scope to escape co_names whitelist check](https://agentprime.io/advisories/CVE-2026-28505.md) `CVE-2026-28505` · CVE record: Tautulli Tautulli · CVSS 7.5 High · Not analysed yet · Published 30 Mar 2026 · Tags: Code injection - [OS command injection in Vim](https://agentprime.io/advisories/CVE-2026-34714.md) `CVE-2026-34714` · CVE record: Vim Vim · CVSS 9.2 Critical · Critical (CVSS 9+) · Not analysed yet · Published 30 Mar 2026 · Tags: Command injection, Code injection - [code-projects Exam Form Submission update_fst.php cross site scripting](https://agentprime.io/advisories/CVE-2026-5106.md) `CVE-2026-5106` · CVE record: code-projects Exam Form Submission · CVSS 4.8 Medium · Not analysed yet · Published 30 Mar 2026 · Tags: Cross-site scripting (XSS), Code injection - [DSAI-Cline's command auto-approval module contains a critical OS command injection vulnerability that renders its whitelist security mechanism completely ineffective.](https://agentprime.io/advisories/CVE-2026-30313.md) `CVE-2026-30313` · CVE record · CVSS 9.8 Critical · Critical (CVSS 9+) · Not analysed yet · Published 30 Mar 2026 · Tags: Code injection - [In its design for automatic terminal command execution, HAI Build Code Generator offers two options: Execute safe commands and Execute all commands.](https://agentprime.io/advisories/CVE-2026-30308.md) `CVE-2026-30308` · CVE record · CVSS 9.8 Critical · Critical (CVSS 9+) · Not analysed yet · Published 30 Mar 2026 · Tags: Code injection - [Roo Code's command auto-approval module contains a critical OS command injection vulnerability that renders its whitelist security mechanism completely ineffective.](https://agentprime.io/advisories/CVE-2026-30307.md) `CVE-2026-30307` · CVE record · CVSS 9.8 Critical · Critical (CVSS 9+) · Not analysed yet · Published 30 Mar 2026 · Tags: Code injection - [In its design for automatic terminal command execution, SakaDev offers two options: Execute safe commands and execute all commands.](https://agentprime.io/advisories/CVE-2026-30306.md) `CVE-2026-30306` · CVE record · CVSS 9.8 Critical · Critical (CVSS 9+) · Not analysed yet · Published 30 Mar 2026 · Tags: Code injection - [Syntx's command auto-approval module contains a critical OS command injection vulnerability that renders its whitelist security mechanism completely ineffective.](https://agentprime.io/advisories/CVE-2026-30305.md) `CVE-2026-30305` · CVE record · CVSS 9.8 Critical · Critical (CVSS 9+) · Not analysed yet · Published 30 Mar 2026 · Tags: Code injection - [GRID::Machine versions through 0.127 for Perl allows arbitrary code execution via unsafe deserialization](https://agentprime.io/advisories/CVE-2026-4851.md) `CVE-2026-4851` · CVE record: CASIANO GRID::Machine · CVSS 9.8 Critical · Critical (CVSS 9+) · Not analysed yet · Published 29 Mar 2026 · Tags: Code injection, Insecure deserialization - [elecV2 elecV2P Endpoint logs cross site scripting](https://agentprime.io/advisories/CVE-2026-5015.md) `CVE-2026-5015` · CVE record: elecV2 elecV2P · CVSS 5.3 Medium · Not analysed yet · Published 28 Mar 2026 · Tags: Cross-site scripting (XSS), Code injection - [elecV2 elecV2P JSON webhook runJSFile code injection](https://agentprime.io/advisories/CVE-2026-5011.md) `CVE-2026-5011` · CVE record: elecV2 elecV2P · CVSS 5.3 Medium · Not analysed yet · Published 28 Mar 2026 · Tags: Other injection, Code injection - [Sinaptik AI PandasAI Chat Message code_executor.py CodeExecutor.execute code injection](https://agentprime.io/advisories/CVE-2026-4998.md) `CVE-2026-4998` · CVE record: Sinaptik AI PandasAI · CVSS 6.9 Medium · Not analysed yet · Published 28 Mar 2026 · Tags: Other injection, Code injection - [wandb OpenUI Window Message Event index.html cross site scripting](https://agentprime.io/advisories/CVE-2026-4995.md) `CVE-2026-4995` · CVE record: wandb OpenUI · CVSS 5.1 Medium · Not analysed yet · Published 28 Mar 2026 · Tags: Cross-site scripting (XSS), Code injection - [Zebra node crash — V5 transaction hash panic (P2P reachable)](https://agentprime.io/advisories/GHSA-qp6f-w4r3-h8wg.md) `GHSA-qp6f-w4r3-h8wg`, `CVE-2026-34202` · crates.io `zebra-chain` and 1 more: affected `<6.0.1`, fixed in `6.0.1` · CVSS 9.2 Critical · Critical (CVSS 9+) · Not analysed yet · Published 27 Mar 2026 · Tags: Code injection - [Giskard Agents have Server-side template injection via ChatWorkflow.chat() using non-sandboxed Jinja2 Environment](https://agentprime.io/advisories/GHSA-frv4-x25r-588m.md) `GHSA-frv4-x25r-588m`, `CVE-2026-34172`, `PYSEC-2026-2487` · PyPI `giskard-agents`: affected `<0.3.4 || >=1.0.1a1, <1.0.2b1`, fixed in `0.3.4`, `1.0.2b1` · CVSS 7.7 High · Not analysed yet · Published 27 Mar 2026 · Tags: Code injection - [wandb OpenUI HTMLAnnotator server.py get_share HTML injection](https://agentprime.io/advisories/CVE-2026-4992.md) `CVE-2026-4992` · CVE record: wandb OpenUI · CVSS 5.3 Medium · Not analysed yet · Published 27 Mar 2026 · Tags: Cross-site scripting (XSS), Code injection - [QDOCS Smart School Management System Admission Enquiry enquiry cross site scripting](https://agentprime.io/advisories/CVE-2026-4991.md) `CVE-2026-4991` · CVE record: QDOCS Smart School Management System · CVSS 5.1 Medium · Not analysed yet · Published 27 Mar 2026 · Tags: Cross-site scripting (XSS), Code injection - [Notesnook vulnerable to RCE via stored XSS in Note History diff viewer](https://agentprime.io/advisories/CVE-2026-33955.md) `CVE-2026-33955` · CVE record: streetwriters Notesnook Web/Desktop · CVSS 8.6 High · Not analysed yet · Published 27 Mar 2026 · Tags: Cross-site scripting (XSS), Code injection - [Notesnook vulnerable to RCE via stored XSS in Web Clipper rendering](https://agentprime.io/advisories/CVE-2026-33976.md) `CVE-2026-33976` · CVE record: streetwriters Notesnook Web/Desktop and 1 more · CVSS 9.7 Critical · Critical (CVSS 9+) · Not analysed yet · Published 27 Mar 2026 · Tags: Cross-site scripting (XSS), Code injection - [Windmill: Rogue Workspace Admins can inject code via unescaped workspace environment variable interpolation in NativeTS executor](https://agentprime.io/advisories/CVE-2026-33881.md) `CVE-2026-33881` · CVE record: windmill-labs windmill · CVSS 7.3 High · Not analysed yet · Published 27 Mar 2026 · Tags: Code injection - [SourceCodester Online Quiz System add-question.php cross site scripting](https://agentprime.io/advisories/CVE-2026-4973.md) `CVE-2026-4973` · CVE record: SourceCodester Online Quiz System · CVSS 5.1 Medium · Not analysed yet · Published 27 Mar 2026 · Tags: Cross-site scripting (XSS), Code injection - [Zero-Click Indirect Prompt Injection and Authentication Bypass via Email Polling](https://agentprime.io/advisories/CVE-2026-33654.md) `CVE-2026-33654` · CVE record: HKUDS nanobot · CVSS 8.9 High · Not analysed yet · Published 27 Mar 2026 · Tags: Code injection, Authentication bypass - [Ruby LSP has arbitrary code execution through branch setting](https://agentprime.io/advisories/GHSA-c4r5-fxqw-vh93.md) `GHSA-c4r5-fxqw-vh93`, `CVE-2026-34060` · RubyGems `ruby-lsp`: affected `<0.26.9`, fixed in `0.26.9` · CVSS 7.1 High · Not analysed yet · Published 27 Mar 2026 · Tags: Code injection - [code-projects Online Reviewer System btn_functions.php cross site scripting](https://agentprime.io/advisories/CVE-2026-4972.md) `CVE-2026-4972` · CVE record: code-projects Online Reviewer System · CVSS 4.8 Medium · Not analysed yet · Published 27 Mar 2026 · Tags: Cross-site scripting (XSS), Code injection - [Hugging Face Smolagents has an Injection issue](https://agentprime.io/advisories/GHSA-54fq-v6x8-244g.md) `GHSA-54fq-v6x8-244g`, `CVE-2026-4963`, `PYSEC-2026-3066` · PyPI `smolagents`: affected `<=1.25.0.dev0`, no fixed version yet · CVSS 5.3 Medium · Not analysed yet · Published 27 Mar 2026 · Tags: Other injection, Code injection - [code-projects Social Networking Site Alert home.php cross site scripting](https://agentprime.io/advisories/CVE-2026-4969.md) `CVE-2026-4969` · CVE record: code-projects Social Networking Site · CVSS 5.1 Medium · Not analysed yet · Published 27 Mar 2026 · Tags: Cross-site scripting (XSS), Code injection - [Handlebars.js has JavaScript Injection in CLI Precompiler via Unescaped Names and Options](https://agentprime.io/advisories/GHSA-xjpj-3mr7-gcpf.md) `GHSA-xjpj-3mr7-gcpf`, `CVE-2026-33941` · npm `handlebars`: affected `>=4.0.0, <4.7.9`, fixed in `4.7.9` · CVSS 8.3 High · Not analysed yet · Published 27 Mar 2026 · Tags: Cross-site scripting (XSS), Code injection, CWE-116 - [Handlebars.js has JavaScript Injection via AST Type Confusion when passing an object as dynamic partial](https://agentprime.io/advisories/GHSA-xhpv-hc6g-r9c6.md) `GHSA-xhpv-hc6g-r9c6`, `CVE-2026-33940` · npm `handlebars`: affected `>=4.0.0, <4.7.9`, fixed in `4.7.9` · CVSS 8.1 High · Not analysed yet · Published 27 Mar 2026 · Tags: Code injection, Memory corruption - [Handlebars.js has JavaScript Injection via AST Type Confusion by tampering @partial-block](https://agentprime.io/advisories/GHSA-3mfm-83xf-c92r.md) `GHSA-3mfm-83xf-c92r`, `CVE-2026-33938` · npm `handlebars`: affected `>=4.0.0, <4.7.9`, fixed in `4.7.9` · CVSS 8.1 High · Not analysed yet · Published 27 Mar 2026 · Tags: Code injection, Memory corruption - [Handlebars.js has JavaScript Injection via AST Type Confusion](https://agentprime.io/advisories/GHSA-2w6w-674q-4c4q.md) `GHSA-2w6w-674q-4c4q`, `CVE-2026-33937` · npm `handlebars`: affected `>=4.0.0, <4.7.9`, fixed in `4.7.9` · CVSS 9.8 Critical · Critical (CVSS 9+) · Not analysed yet · Published 27 Mar 2026 · Tags: Code injection, Memory corruption - [Traefik has Knative Ingress Rule Injection that Allows Host Restriction Bypass](https://agentprime.io/advisories/GHSA-67jx-r9pv-98rj.md) `GHSA-67jx-r9pv-98rj`, `CVE-2026-32695`, `GO-2026-4880` · Go `github.com/traefik/traefik/v2` and 1 more: affected `<=2.11.42`, no fixed version yet · CVSS 6.3 Medium · Not analysed yet · Published 27 Mar 2026 · Tags: Other injection, Code injection - [letta-ai letta Incomplete Fix CVE-2025-6101 ast_parsers.py resolve_type eval injection](https://agentprime.io/advisories/CVE-2026-4965.md) `CVE-2026-4965` · CVE record: letta-ai letta · CVSS 6.9 Medium · Not analysed yet · Published 27 Mar 2026 · Tags: Code injection - [Incus vulnerable to arbitrary file read and write through pongo templates](https://agentprime.io/advisories/GHSA-83xr-5xxr-mh92.md) `GHSA-83xr-5xxr-mh92`, `CVE-2026-33897`, `GO-2026-4881` · Go `github.com/lxc/incus` and 1 more: affected `<=0.7.0`, no fixed version yet · CVSS 10.0 Critical · Critical (CVSS 9+) · Not analysed yet · Published 27 Mar 2026 · Tags: Code injection - [Wazuh Agent and Manager OS Command Injection and Untrusted Search Path](https://agentprime.io/advisories/CVE-2025-15616.md) `CVE-2025-15616` · CVE record: Wazuh wazuh-agent and 1 more · CVSS 7.1 High · Not analysed yet · Published 27 Mar 2026 · Tags: Code injection - [RCE on Grafana via sqlExpressions](https://agentprime.io/advisories/CVE-2026-27876.md) `CVE-2026-27876` · CVE record: Grafana Grafana · CVSS 9.1 Critical · Critical (CVSS 9+) · Not analysed yet · Published 27 Mar 2026 · Tags: SQL injection, Code injection - [Spring AI: SpEL injection is triggered when a user-supplied value is used as a filter expression key](https://agentprime.io/advisories/GHSA-fvh3-672c-7p6c.md) `GHSA-fvh3-672c-7p6c`, `CVE-2026-22738` · Maven `org.springframework.ai:spring-ai-vector-store`: affected `>=1.0.0, <1.0.5 || >=1.1.0-M1, <1.1.4`, fixed in `1.0.5`, `1.1.4` · CVSS 9.8 Critical · Critical (CVSS 9+) · Not analysed yet · Published 27 Mar 2026 · Tags: Command injection, Code injection - [Code injection in BUFFALO INC. BUFFALO Wi-Fi router products](https://agentprime.io/advisories/CVE-2026-32669.md) `CVE-2026-32669` · CVE record: BUFFALO INC. BUFFALO Wi-Fi router products · CVSS 8.7 High · Not analysed yet · Published 27 Mar 2026 · Tags: Code injection - [code-projects Exam Form Submission update_s7.php cross site scripting](https://agentprime.io/advisories/CVE-2026-4909.md) `CVE-2026-4909` · CVE record: code-projects Exam Form Submission · CVSS 4.8 Medium · Not analysed yet · Published 27 Mar 2026 · Tags: Cross-site scripting (XSS), Code injection - [Happy DOM ECMAScriptModuleCompiler: unsanitized export names are interpolated as executable code](https://agentprime.io/advisories/GHSA-6q6h-j7hj-3r64.md) `GHSA-6q6h-j7hj-3r64`, `CVE-2026-33943` · npm `happy-dom`: affected `>=15.10.0, <20.8.8`, fixed in `20.8.8` · CVSS 8.8 High · Not analysed yet · Published 26 Mar 2026 · Tags: Code injection - [code-projects Online Food Ordering System food.php cross site scripting](https://agentprime.io/advisories/CVE-2026-4899.md) `CVE-2026-4899` · CVE record: code-projects Online Food Ordering System · CVSS 4.8 Medium · Not analysed yet · Published 26 Mar 2026 · Tags: Cross-site scripting (XSS), Code injection - [code-projects Online Food Ordering System contact.php cross site scripting](https://agentprime.io/advisories/CVE-2026-4898.md) `CVE-2026-4898` · CVE record: code-projects Online Food Ordering System · CVSS 5.3 Medium · Not analysed yet · Published 26 Mar 2026 · Tags: Cross-site scripting (XSS), Code injection - [Contrast BadAML injection allows arbitrary code execution](https://agentprime.io/advisories/GHSA-g9ww-x58f-9g6m.md) `GHSA-g9ww-x58f-9g6m`, `CVE-2026-100839`, `GO-2026-4863` · Go `github.com/edgelesssys/contrast`: affected `<1.18.0`, fixed in `1.18.0` · CVSS 8.4 High · Not analysed yet · Published 26 Mar 2026 · Tags: Code injection - [Langflow has Authenticated Code Execution in Agentic Assistant Validation](https://agentprime.io/advisories/GHSA-v8hw-mh8c-jxfc.md) `GHSA-v8hw-mh8c-jxfc`, `CVE-2026-33873`, `PYSEC-2026-82` · PyPI `langflow`: affected `<1.9.0`, fixed in `1.9.0` · CVSS 9.3 Critical · Critical (CVSS 9+) · Not analysed yet · Published 26 Mar 2026 · Tags: Code injection - [itsourcecode Payroll Management System index.php cross site scripting](https://agentprime.io/advisories/CVE-2026-4877.md) `CVE-2026-4877` · CVE record: itsourcecode Payroll Management System · CVSS 5.3 Medium · Not analysed yet · Published 26 Mar 2026 · Tags: Cross-site scripting (XSS), Code injection Newest: Older: ## Filters and formats Filters are query parameters on this URL: `q` (words, as in a web search engine: `"a phrase"`, `OR`, `-word`; an id; a package or product name), `severity` (low, medium, high or critical), `critical=1`, `kev=1`, `ecosystem` (npm, pypi, packagist, go, maven, rubygems, crates, nuget, hex), `kind=package`, `assigner` (a CNA’s short name), `min_score` and `state`. Each record’s title links to its Markdown page. - The same list as JSON: - Every list: , critical: ; by weakness: and the other tags in ; by technology: `/advisories/technology/.md` (`fortinet-fortimail`) --- The web page: . Everything for agents: .