# Code injection.

Untrusted input evaluated as code: eval, templates, expression languages. Every Advisory and CVE whose weakness (CWE) is one of these, newest first.

## Records, newest first (an older page)

- [CosyVoice thru commit 6e01309e01bc93bbeb83bdd996b1182a81aaf11e (2025-30-21) contains an insecure deserialization vulnerability (CWE-502) in its model loading component.](https://agentprime.io/advisories/CVE-2026-31252.md)
  `CVE-2026-31252` · CVE record · CVSS 5.7 Medium · Not analysed yet · Published 11 May 2026 · Tags: Code injection, Broken access control
- [CosyVoice thru commit 6e01309e01bc93bbeb83bdd996b1182a81aaf11e (2025-30-21) contains an insecure deserialization vulnerability (CWE-502) in its gRPC server component.](https://agentprime.io/advisories/CVE-2026-31251.md)
  `CVE-2026-31251` · CVE record · CVSS 7.3 High · Not analysed yet · Published 11 May 2026 · Tags: Code injection, Broken access control, CWE-20
- [Devs Palace ERP Online sales_save cross site scripting](https://agentprime.io/advisories/CVE-2026-8254.md)
  `CVE-2026-8254` · CVE record: Devs Palace ERP Online · CVSS 4.8 Medium · Not analysed yet · Published 10 May 2026 · Tags: Cross-site scripting (XSS), Code injection
- [Devs Palace ERP Online purchase_save cross site scripting](https://agentprime.io/advisories/CVE-2026-8253.md)
  `CVE-2026-8253` · CVE record: Devs Palace ERP Online · CVSS 4.8 Medium · Not analysed yet · Published 10 May 2026 · Tags: Cross-site scripting (XSS), Code injection
- [Sentry 8.2.0 contains a remote code execution vulnerability that allows authenticated superusers to execute arbitrary commands by injecting malicious pickle-serialized objects through the audit log...](https://agentprime.io/advisories/GHSA-444r-2whx-3685.md)
  `GHSA-444r-2whx-3685`, `CVE-2021-47935`, `PYSEC-2026-131` · PyPI `sentry`: affected `<=8.2.0`, no fixed version yet · CVSS 8.7 High · Not analysed yet · Published 10 May 2026 · Tags: Code injection
- [Evolution CMS 3.1.6 Authenticated Remote Code Execution via Module Creation](https://agentprime.io/advisories/CVE-2021-47939.md)
  `CVE-2021-47939` · CVE record: Evo Evolution CMS · CVSS 8.7 High · Not analysed yet · Published 10 May 2026 · Tags: Code injection
- [ImpressCMS 1.4.2 Remote Code Execution via Autotasks](https://agentprime.io/advisories/CVE-2021-47938.md)
  `CVE-2021-47938` · CVE record: Impresscms ImpressCMS · CVSS 8.7 High · Not analysed yet · Published 10 May 2026 · Tags: Code injection
- [Aero CMS 0.0.1 PHP Code Injection via posts.php](https://agentprime.io/advisories/CVE-2022-50944.md)
  `CVE-2022-50944` · CVE record: MegaTKC Aero CMS · CVSS 8.7 High · Not analysed yet · Published 10 May 2026 · Tags: Code injection
- [Devs Palace ERP Online item-save cross site scripting](https://agentprime.io/advisories/CVE-2026-8221.md)
  `CVE-2026-8221` · CVE record: Devs Palace ERP Online · CVSS 4.8 Medium · Not analysed yet · Published 10 May 2026 · Tags: Cross-site scripting (XSS), Code injection
- [Devs Palace ERP Online customer-save cross site scripting](https://agentprime.io/advisories/CVE-2026-8220.md)
  `CVE-2026-8220` · CVE record: Devs Palace ERP Online · CVSS 4.8 Medium · Not analysed yet · Published 10 May 2026 · Tags: Cross-site scripting (XSS), Code injection
- [Devs Palace ERP Online supplier-save cross site scripting](https://agentprime.io/advisories/CVE-2026-8219.md)
  `CVE-2026-8219` · CVE record: Devs Palace ERP Online · CVSS 4.8 Medium · Not analysed yet · Published 10 May 2026 · Tags: Cross-site scripting (XSS), Code injection
- [Devs Palace ERP Online purchase_return_save cross site scripting](https://agentprime.io/advisories/CVE-2026-8218.md)
  `CVE-2026-8218` · CVE record: Devs Palace ERP Online · CVSS 4.8 Medium · Not analysed yet · Published 10 May 2026 · Tags: Cross-site scripting (XSS), Code injection
- [codelibs Fess JSP File AdminDesignAction.java update code injection](https://agentprime.io/advisories/CVE-2026-8211.md)
  `CVE-2026-8211` · CVE record: codelibs Fess · CVSS 5.1 Medium · Not analysed yet · Published 9 May 2026 · Tags: Other injection, Code injection
- [JeecgBoot SVG File CommonController.java cross site scripting](https://agentprime.io/advisories/CVE-2026-8195.md)
  `CVE-2026-8195` · CVE record: JeecgBoot · CVSS 5.3 Medium · Not analysed yet · Published 9 May 2026 · Tags: Cross-site scripting (XSS), Code injection
- [Spring AI's MilvusVectorStore#doDelete(List) implementation is vulnerable to filter-expression injection via unsanitized document IDs](https://agentprime.io/advisories/GHSA-v632-2m87-7469.md)
  `GHSA-v632-2m87-7469`, `CVE-2026-41705` · Maven `org.springframework.ai:spring-ai-milvus-store` and 1 more: affected `>=1.0.0, <1.0.7 || >=1.1.0, <1.1.6`, fixed in `1.0.7`, `1.1.6` · CVSS 8.6 High · Not analysed yet · Published 9 May 2026 · Tags: Code injection
- [Postiz: Arbitrary Code Execution and Token Exfiltration in pr-docker-build.yml via untrusted Dockerfile.dev](https://agentprime.io/advisories/CVE-2026-42298.md)
  `CVE-2026-42298` · CVE record: gitroomhq postiz-app · CVSS 10.0 Critical · Critical (CVSS 9+) · Not analysed yet · Published 8 May 2026 · Tags: Code injection
- [banks has Critical Remote Code Execution (RCE) via Jinja2 SSTI](https://agentprime.io/advisories/GHSA-gphh-9q3h-jgpp.md)
  `GHSA-gphh-9q3h-jgpp`, `CVE-2026-44209`, `PYSEC-2026-2390` · PyPI `banks`: affected `<2.4.2`, fixed in `2.4.2` · CVSS 7.5 High · Not analysed yet · Published 8 May 2026 · Tags: Code injection
- [@babel/plugin-transform-modules-systemjs generates arbitrary code when compiling malicious input](https://agentprime.io/advisories/GHSA-fv7c-fp4j-7gwp.md)
  `GHSA-fv7c-fp4j-7gwp`, `CVE-2026-44728` · npm `@babel/plugin-transform-modules-systemjs`: affected `>=7.12.0, <7.29.4 || >=8.0.0-alpha.0, <8.0.0-alpha.13`, fixed in `7.29.4`, `8.0.0-alpha.13` · CVSS 8.2 High · Not analysed yet · Published 8 May 2026 · Tags: Code injection, Memory corruption
- [Code injection in WebPros cPanel and others](https://agentprime.io/advisories/CVE-2026-29202.md)
  `CVE-2026-29202` · CVE record: WebPros cPanel and 2 more · CVSS 5.3 Medium · Not analysed yet · Published 8 May 2026 · Tags: Code injection
- [Electerm users can run dangrous code through link or command line](https://agentprime.io/advisories/GHSA-mpm8-cx2p-626q.md)
  `GHSA-mpm8-cx2p-626q`, `CVE-2026-43944` · npm `electerm`: affected `>=3.0.6, <3.8.8`, fixed in `3.8.8` · CVSS 9.4 Critical · Critical (CVSS 9+) · Not analysed yet · Published 8 May 2026 · Tags: Code injection, CWE-20, CWE-829
- [SiYuan Affected by Stored XSS via Attribute View Name to Electron Renderer RCE](https://agentprime.io/advisories/GHSA-2h64-c999-c9r6.md)
  `GHSA-2h64-c999-c9r6`, `CVE-2026-44670`, `GO-2026-4992` · Go `github.com/siyuan-note/siyuan/kernel`: affected `<0.0.0-20260512140701-d7b77d945e0d`, fixed in `0.0.0-20260512140701-d7b77d945e0d` · CVSS 9.4 Critical · Critical (CVSS 9+) · Not analysed yet · Published 8 May 2026 · Tags: Cross-site scripting (XSS), Code injection, CWE-1188
- [Remote code execution via JavaScript injection in \`BrowserAutomation::PlaywrightService\`](https://agentprime.io/advisories/CVE-2026-41512.md)
  `CVE-2026-41512` · CVE record: 0din-ai ai-scanner · CVSS 9.9 Critical · Critical (CVSS 9+) · Not analysed yet · Published 8 May 2026 · Tags: Code injection
- [Server-side template injection](https://agentprime.io/advisories/CVE-2026-44129.md)
  `CVE-2026-44129` · CVE record: SEPPmail AG Secure Email Gateway · CVSS 8.3 High · Not analysed yet · Published 8 May 2026 · Tags: Code injection
- [Unauthenticated Remote Code Execution](https://agentprime.io/advisories/CVE-2026-44128.md)
  `CVE-2026-44128` · CVE record: SEPPmail AG Secure Email Gateway · CVSS 9.3 Critical · Critical (CVSS 9+) · Not analysed yet · Published 8 May 2026 · Tags: Code injection
- [Apache CloudStack: Unauthenticated Command Injection in Direct Download Templates](https://agentprime.io/advisories/CVE-2026-25077.md)
  `CVE-2026-25077` · CVE record: Apache Software Foundation Apache CloudStack · CVSS 8.8 High · Not analysed yet · Published 8 May 2026 · Tags: Code injection
- [Template injection in OpenStack Ironic](https://agentprime.io/advisories/CVE-2026-44916.md)
  `CVE-2026-44916` · CVE record: OpenStack Ironic · CVSS 3.0 Low · Not analysed yet · Published 8 May 2026 · Tags: Code injection
- [SourceCodester Pharmacy Sales and Inventory System index.php users cross site scripting](https://agentprime.io/advisories/CVE-2026-8136.md)
  `CVE-2026-8136` · CVE record: SourceCodester Pharmacy Sales and Inventory System · CVSS 4.8 Medium · Not analysed yet · Published 8 May 2026 · Tags: Cross-site scripting (XSS), Code injection
- [1C-Bitrix through 25.100.500 allows Remote Code Execution because an actor with SOURCE/WRITE permissions for the Translate Module can upload and execute code by sending a PHP file and a .htaccess fil…](https://agentprime.io/advisories/CVE-2025-67887.md)
  `CVE-2025-67887` · CVE record · CVSS 9.8 Critical · Critical (CVSS 9+) · Not analysed yet · Published 8 May 2026 · Tags: Code injection
- [A SSTI (server side template injection) vulnerability in the custom template export function in yeti-platform yeti before 2.1.12 allows attackers to execute code on the application server.](https://agentprime.io/advisories/CVE-2024-46507.md)
  `CVE-2024-46507` · CVE record · CVSS 7.3 High · Not analysed yet · Published 8 May 2026 · Tags: Code injection
- [SourceCodester Pizzafy Ecommerce System index.php cross site scripting](https://agentprime.io/advisories/CVE-2026-8117.md)
  `CVE-2026-8117` · CVE record: SourceCodester Pizzafy Ecommerce System · CVSS 5.3 Medium · Not analysed yet · Published 7 May 2026 · Tags: Cross-site scripting (XSS), Code injection
- [FacturaScripts Vulnerable to Authenticated Remote Code Execution (RCE) via GIF Image Upload in Product Images](https://agentprime.io/advisories/GHSA-vf3q-frmr-vrr9.md)
  `GHSA-vf3q-frmr-vrr9`, `CVE-2026-42879`, `PKSA-rs14-58cq-g5jg` · Packagist `facturascripts/facturascripts`: affected `<=2025.81`, no fixed version yet · CVSS 6.3 Medium · Not analysed yet · Published 7 May 2026 · Tags: Code injection, Unrestricted file upload
- [Improper Control of Generation of Code ('Code Injection') in dail8859/NotepadNext](https://agentprime.io/advisories/CVE-2026-42214.md)
  `CVE-2026-42214` · CVE record: dail8859 NotepadNext · CVSS 7.8 High · Not analysed yet · Published 7 May 2026 · Tags: Code injection
- [next-npm-version is vulnerable to Command injection](https://agentprime.io/advisories/GHSA-2xx6-qf7x-grqh.md)
  `GHSA-2xx6-qf7x-grqh`, `CVE-2025-63706` · npm `@jswork/next-npm-version`: affected `=1.0.1`, no fixed version yet · CVSS 9.8 Critical · Critical (CVSS 9+) · Not analysed yet · Published 7 May 2026 · Tags: Code injection
- [Other issue in the WebRTC component](https://agentprime.io/advisories/CVE-2026-8094.md)
  `CVE-2026-8094` · CVE record: Mozilla Firefox and 1 more · CVSS 9.8 Critical · Critical (CVSS 9+) · Not analysed yet · Published 7 May 2026 · Tags: Code injection
- [SurrealDB Injection on Open Notebook](https://agentprime.io/advisories/CVE-2026-28201.md)
  `CVE-2026-28201` · CVE record: Open Notebook Open Notebook · CVSS 8.7 High · Not analysed yet · Published 7 May 2026 · Tags: Cross-site request forgery (CSRF), Code injection, CWE-20
- [Remote Code Execution Vulnerability in Hitachi Storage Navigator and the maintenance console](https://agentprime.io/advisories/CVE-2025-1978.md)
  `CVE-2025-1978` · CVE record: Hitachi Hitachi Virtual Storage Platform G130, G150, G350, G370, G700, G900, F350, F370, F700, F900 and 2 more · CVSS 8.3 High · Not analysed yet · Published 7 May 2026 · Tags: Code injection
- [Diffusers has a \`trust_remote_code\` bypass via \`custom_pipeline\` and local custom components](https://agentprime.io/advisories/GHSA-98h9-4798-4q5v.md)
  `GHSA-98h9-4798-4q5v`, `CVE-2026-44513`, `PYSEC-2026-40` · PyPI `diffusers`: affected `<0.38.0`, fixed in `0.38.0` · CVSS 8.8 High · Not analysed yet · Published 7 May 2026 · Tags: Code injection, CWE-358
- [vm2: Mutable Proxies for Host Intrinsic Prototypes Allows Sandbox Escape](https://agentprime.io/advisories/GHSA-vwrp-x96c-mhwq.md)
  `GHSA-vwrp-x96c-mhwq`, `CVE-2026-44005` · npm `vm2`: affected `>=3.9.6, <3.11.0`, fixed in `3.11.0` · CVSS 10.0 Critical · Critical (CVSS 9+) · Not analysed yet · Published 7 May 2026 · Tags: Code injection, Prototype pollution, CWE-653
- [vm2 Access to Host Object Enables Sandbox Escape](https://agentprime.io/advisories/GHSA-47x8-96vw-5wg6.md)
  `GHSA-47x8-96vw-5wg6`, `CVE-2026-43997` · npm `vm2`: affected `<3.11.0`, fixed in `3.11.0` · CVSS 10.0 Critical · Critical (CVSS 9+) · Not analysed yet · Published 7 May 2026 · Tags: Code injection, CWE-653
- [vm2 has a Sandbox Escape Vulnerability](https://agentprime.io/advisories/GHSA-qcp4-v2jj-fjx8.md)
  `GHSA-qcp4-v2jj-fjx8`, `CVE-2026-44006` · npm `vm2`: affected `<3.11.0`, fixed in `3.11.0` · CVSS 10.0 Critical · Critical (CVSS 9+) · Not analysed yet · Published 7 May 2026 · Tags: Code injection, CWE-914
- [Diffusers has a \`trust_remote_code\` bypass via \`custom_pipeline\` and local custom components](https://agentprime.io/advisories/GHSA-j7w6-vpvq-j3gm.md)
  `GHSA-j7w6-vpvq-j3gm`, `CVE-2026-44827`, `PYSEC-2026-41` · PyPI `diffusers`: affected `<0.38.0`, fixed in `0.38.0` · CVSS 8.8 High · Withdrawn · Not analysed yet · Published 7 May 2026 · Tags: Code injection
- [ChestnutCMS v1.5.10 has a SQL injection vulnerability.](https://agentprime.io/advisories/CVE-2026-36458.md)
  `CVE-2026-36458` · CVE record · CVSS 9.8 Critical · Critical (CVSS 9+) · Not analysed yet · Published 7 May 2026 · Tags: Code injection
- [PraisonAI has unauthenticated RCE via \`tool_override.py\` (CVE-2026-40287 patch bypass)](https://agentprime.io/advisories/GHSA-xcmw-grxf-wjhj.md)
  `GHSA-xcmw-grxf-wjhj`, `CVE-2026-44334`, `PYSEC-2026-2926` · PyPI `praisonai`: affected `>=4.5.139, <4.6.32`, fixed in `4.6.32` · CVSS 8.4 High · Not analysed yet · Published 6 May 2026 · Tags: Code injection
- [GitPython: Newline injection in config_writer().set_value() enables RCE via core.hooksPath](https://agentprime.io/advisories/GHSA-v87r-6q3f-2j67.md)
  `GHSA-v87r-6q3f-2j67`, `CVE-2026-44244`, `PYSEC-2026-2163` · PyPI `gitpython`: affected `<3.1.49`, fixed in `3.1.49` · CVSS 7.8 High · Not analysed yet · Published 6 May 2026 · Tags: Code injection
- [Valtimo has SpEL injection via StandardEvaluationContext that allows Remote Code Execution by admin users](https://agentprime.io/advisories/GHSA-j7j9-5253-f7vh.md)
  `GHSA-j7j9-5253-f7vh`, `CVE-2026-42555` · Maven `com.ritense.valtimo:case` and 2 more: affected `>=13.0.0, <13.23.0`, fixed in `13.23.0` · CVSS 9.1 Critical · Critical (CVSS 9+) · Not analysed yet · Published 6 May 2026 · Tags: Code injection
- [Scramble vulnerable to remote code execution via evaluation of user-controlled input in validation rules](https://agentprime.io/advisories/GHSA-4rm2-28vj-fj39.md)
  `GHSA-4rm2-28vj-fj39`, `CVE-2026-44262`, `PKSA-kb5d-bgb1-8ykp`, `PKSA-qgg1-cfs4-rkb8` · Packagist `dedoc/scramble`: affected `>=0.13.2, <0.13.22`, fixed in `0.13.22` · CVSS 9.4 Critical · Critical (CVSS 9+) · Not analysed yet · Published 6 May 2026 · Tags: Code injection
- [Code injection in Google Chrome](https://agentprime.io/advisories/CVE-2026-8021.md)
  `CVE-2026-8021` · CVE record: Google Chrome · CVSS 4.2 Medium · Not analysed yet · Published 6 May 2026 · Tags: Code injection
- [Craft CMS has Potential Authenticated Remote Code Execution via Malicious Attached Behavior](https://agentprime.io/advisories/GHSA-qrgm-p9w5-rrfw.md)
  `GHSA-qrgm-p9w5-rrfw`, `CVE-2026-44011`, `PKSA-7b21-z11x-97gc` · Packagist `craftcms/cms`: affected `>=4.0.0, <4.17.12 || >=5.0.0, <5.9.18`, fixed in `4.17.12`, `5.9.18` · CVSS 8.6 High · Not analysed yet · Published 6 May 2026 · Tags: Code injection, CWE-479
- [Nginx-UI is Vulnerable to Unauthenticated Remote Code Execution via Backup Restore](https://agentprime.io/advisories/GHSA-4pvg-prr3-9cxr.md)
  `GHSA-4pvg-prr3-9cxr`, `CVE-2026-42238`, `GO-2026-5129` · Go `github.com/0xJacky/nginx-ui`: affected `<2.3.8`, fixed in `2.3.8` · CVSS 9.0 Critical · Critical (CVSS 9+) · Not analysed yet · Published 6 May 2026 · Tags: Code injection
- [Code injection in Oracle Corporation Oracle Cloud Native Environment Command Line Interface](https://agentprime.io/advisories/CVE-2026-35255.md)
  `CVE-2026-35255` · CVE record: Oracle Corporation Oracle Cloud Native Environment Command Line Interface · CVSS 6.6 Medium · Not analysed yet · Published 6 May 2026 · Tags: Code injection
- [GV-ASWeb Remote Code Execution (RCE) vulnerability](https://agentprime.io/advisories/CVE-2026-7841.md)
  `CVE-2026-7841` · CVE record: GeoVision Inc. ASManager · CVSS 8.8 High · Not analysed yet · Published 6 May 2026 · Tags: Code injection
- [jdbi3-freemarker Vulnerable to Improper Neutralization of Special Elements Used in FreeMarker Template Engine](https://agentprime.io/advisories/GHSA-mggx-p7jf-jgw4.md)
  `GHSA-mggx-p7jf-jgw4` · Maven `org.jdbi:jdbi3-freemarker`: affected `<3.53.0`, fixed in `3.53.0` · CVSS 4.0, no score published · Not analysed yet · Published 5 May 2026 · Tags: Code injection
- [Grav Vulnerable to Remote Code Execution (RCE) via Malicious Plugin ZIP Upload in Direct Install Feature](https://agentprime.io/advisories/GHSA-w48r-jppp-rcfw.md)
  `GHSA-w48r-jppp-rcfw`, `CVE-2026-42607`, `PKSA-st6r-p3js-kbk7` · Packagist `getgrav/grav`: affected `<2.0.0-beta.2`, fixed in `2.0.0-beta.2` · CVSS 9.1 Critical · Critical (CVSS 9+) · Not analysed yet · Published 5 May 2026 · Tags: Code injection
- [AVideo has an Incomplete Fix for YPTSocket autoEvalCodeOnHTML Strip: Unauthenticated Cross-User JavaScript Execution via \`$msg\['json'\]\` Relay Bypass](https://agentprime.io/advisories/GHSA-ghcv-22jf-vfxm.md)
  `GHSA-ghcv-22jf-vfxm`, `CVE-2026-43874`, `PKSA-15fj-zg4r-zsnq` · Packagist `wwbn/avideo`: affected `<=29.0`, no fixed version yet · CVSS 7.2 High · Not analysed yet · Published 5 May 2026 · Tags: Code injection
- [PPTAgent: Arbitrary Code Execution via Python eval() of LLM-Generated Code with Builtins in Scope](https://agentprime.io/advisories/GHSA-89g2-xw5c-v95p.md)
  `GHSA-89g2-xw5c-v95p`, `CVE-2026-42079`, `PYSEC-2026-2892` · PyPI `pptagent`: affected `<1.1.36`, fixed in `1.1.36` · CVSS 8.6 High · Not analysed yet · Published 5 May 2026 · Tags: Code injection
- [OpenClaw vulnerable to arbitrary code execution via attacker-controlled setup-api.js loaded from cwd during env-key resolution](https://agentprime.io/advisories/GHSA-r39h-4c2p-3jxp.md)
  `GHSA-r39h-4c2p-3jxp`, `CVE-2026-45004` · npm `openclaw`: affected `<2026.4.23`, fixed in `2026.4.23` · CVSS 8.4 High · Not analysed yet · Published 5 May 2026 · Tags: Code injection, CWE-427
- [VM2 Has a WASM Sandbox Escape](https://agentprime.io/advisories/GHSA-ffh4-j6h5-pg66.md)
  `GHSA-ffh4-j6h5-pg66`, `CVE-2026-26956` · npm `vm2`: affected `<3.10.5`, fixed in `3.10.5` · CVSS 9.8 Critical · Critical (CVSS 9+) · Not analysed yet · Published 5 May 2026 · Tags: Code injection, CWE-653, CWE-693
- [VM2 Has a Sandbox Escape Issue via SuppressedError](https://agentprime.io/advisories/GHSA-55hx-c926-fr95.md)
  `GHSA-55hx-c926-fr95`, `CVE-2026-26332` · npm `vm2`: affected `<3.11.0`, fixed in `3.11.0` · CVSS 9.8 Critical · Critical (CVSS 9+) · Not analysed yet · Published 5 May 2026 · Tags: Code injection, CWE-653, CWE-693
- [VM2 Has Sandbox Breakout Through Inspect Function](https://agentprime.io/advisories/GHSA-v37h-5mfm-c47c.md)
  `GHSA-v37h-5mfm-c47c`, `CVE-2026-24781` · npm `vm2`: affected `<3.11.0`, fixed in `3.11.0` · CVSS 9.8 Critical · Critical (CVSS 9+) · Not analysed yet · Published 5 May 2026 · Tags: Code injection, CWE-653, CWE-693
- [VM2 Has Sandbox Breakout Through Promise Species](https://agentprime.io/advisories/GHSA-qvjj-29qf-hp7p.md)
  `GHSA-qvjj-29qf-hp7p`, `CVE-2026-24120` · npm `vm2`: affected `<3.10.5`, fixed in `3.10.5` · CVSS 9.8 Critical · Critical (CVSS 9+) · Not analysed yet · Published 5 May 2026 · Tags: Code injection, CWE-693, CWE-807

Newest: <https://agentprime.io/advisories/tag/code-injection.md>
Older: <https://agentprime.io/advisories/tag/code-injection.md?cursor=WyIyMDI2LTA1LTA1VDE2OjIzOjM1LjAwMDAwMFoiLCJHSFNBLXF2amotMjlxZi1ocDdwIl0>

## Filters and formats

Filters are query parameters on this URL: `q` (words, as in a web search engine: `"a phrase"`, `OR`, `-word`; an id; a package or product name), `severity` (low, medium, high or critical), `critical=1`, `kev=1`, `ecosystem` (npm, pypi, packagist, go, maven, rubygems, crates, nuget, hex), `kind=package`, `assigner` (a CNA’s short name), `min_score` and `state`. Each record’s title links to its Markdown page.

- The same list as JSON: <https://api.agentprime.io/v1/advisories?tag=code-injection&cursor=WyIyMDI2LTA1LTExVDAwOjAwOjAwLjAwMDAwMFoiLCJDVkUtMjAyNi0zMTI1NCJd>
- Every list: <https://agentprime.io/advisories.md>, critical: <https://agentprime.io/advisories/critical.md>; by weakness: <https://agentprime.io/advisories/tag/sql-injection.md> and the other tags in <https://agentprime.io/llms.txt>; by technology: `/advisories/technology/<slug>.md` (`fortinet-fortimail`)

---

The web page: <https://agentprime.io/advisories/tag/code-injection/?cursor=WyIyMDI2LTA1LTExVDAwOjAwOjAwLjAwMDAwMFoiLCJDVkUtMjAyNi0zMTI1NCJd>. Everything for agents: <https://agentprime.io/llms.txt>.