# Code injection.

Untrusted input evaluated as code: eval, templates, expression languages. Every Advisory and CVE whose weakness (CWE) is one of these, newest first.

## Records, newest first (an older page)

- [IBM HTTP Server is affected by multiple vulnerabilities](https://agentprime.io/advisories/CVE-2026-9170.md)
  `CVE-2026-9170` · CVE record: IBM HTTP Server · CVSS 9.8 Critical · Critical (CVSS 9+) · Not analysed yet · Published 26 May 2026 · Tags: Code injection
- [IBM WebSphere Application Server and WebSphere Application Server Liberty are affected by multiple vulnerabilities when using when using Web Server Plug-ins](https://agentprime.io/advisories/CVE-2026-8633.md)
  `CVE-2026-8633` · CVE record: IBM Web Server Plug-ins for WebSphere Application Server and WebSphere Liberty · CVSS 9.8 Critical · Critical (CVSS 9+) · Not analysed yet · Published 26 May 2026 · Tags: Code injection
- [teableio teable Sign-up LoginPage.tsx cross site scripting](https://agentprime.io/advisories/CVE-2026-9566.md)
  `CVE-2026-9566` · CVE record: teableio teable · CVSS 5.3 Medium · Not analysed yet · Published 26 May 2026 · Tags: Cross-site scripting (XSS), Code injection
- [IBM HTTP Server is affected by multiple vulnerabilities](https://agentprime.io/advisories/CVE-2026-8855.md)
  `CVE-2026-8855` · CVE record: IBM HTTP Server · CVSS 8.1 High · Not analysed yet · Published 26 May 2026 · Tags: Code injection
- [SourceCodester/oretnom23 Hospitals Patient Records Management System view_patient cross site scripting](https://agentprime.io/advisories/CVE-2026-9564.md)
  `CVE-2026-9564` · CVE record: SourceCodester Hospitals Patient Records Management System and 1 more · CVSS 4.8 Medium · Not analysed yet · Published 26 May 2026 · Tags: Cross-site scripting (XSS), Code injection
- [Vowpal Wabbit: Shell injection via crafted PR title in python_checks.yml allows arbitrary command execution on CI runner](https://agentprime.io/advisories/CVE-2026-44723.md)
  `CVE-2026-44723` · CVE record: VowpalWabbit vowpal_wabbit · CVSS 5.0 Medium · Not analysed yet · Published 26 May 2026 · Tags: Command injection, Code injection
- [OpenKM 6.3.12 Remote Code Execution via Administrative Scripting](https://agentprime.io/advisories/CVE-2026-42785.md)
  `CVE-2026-42785` · CVE record: Openkm OpenKM Community Edition and 1 more · CVSS 8.6 High · Not analysed yet · Published 26 May 2026 · Tags: Code injection
- [Blitz has a Cross-site Scripting issue](https://agentprime.io/advisories/GHSA-h2p9-cr4h-px24.md)
  `GHSA-h2p9-cr4h-px24`, `CVE-2026-9520` · npm `blitz`: affected `<=3.0.2`, no fixed version yet · CVSS 5.3 Medium · Not analysed yet · Published 26 May 2026 · Tags: Cross-site scripting (XSS), Code injection
- [Dolibarr ERP CRM contains a remote code evaluation vulnerability](https://agentprime.io/advisories/GHSA-hxmh-2xc4-c894.md)
  `GHSA-hxmh-2xc4-c894`, `CVE-2018-25357`, `PKSA-t829-nm92-5bvj` · Packagist `dolibarr/dolibarr`: affected `<6.0.8 || >=7.0.0, <7.0.4`, fixed in `6.0.8`, `7.0.4` · CVSS 9.3 Critical · Critical (CVSS 9+) · Not analysed yet · Published 26 May 2026 · Tags: Code injection
- [itsourcecode Electronic Judging System judges.php cross site scripting](https://agentprime.io/advisories/CVE-2026-9527.md)
  `CVE-2026-9527` · CVE record: itsourcecode Electronic Judging System · CVSS 5.3 Medium · Not analysed yet · Published 26 May 2026 · Tags: Cross-site scripting (XSS), Code injection
- [stonith404 pingvin-share Sign-in Auto-Redirect signIn.tsx getServerSideProps cross site scripting](https://agentprime.io/advisories/CVE-2026-9519.md)
  `CVE-2026-9519` · CVE record: stonith404 pingvin-share · CVSS 5.3 Medium · Not analysed yet · Published 26 May 2026 · Tags: Cross-site scripting (XSS), Code injection
- [hemant6488 CodeIgniter-StudentManagementSystem Students Controller view_students.php addStudent cross site scripting](https://agentprime.io/advisories/CVE-2026-9518.md)
  `CVE-2026-9518` · CVE record: hemant6488 CodeIgniter-StudentManagementSystem · CVSS 5.3 Medium · Not analysed yet · Published 26 May 2026 · Tags: Cross-site scripting (XSS), Code injection
- [WordPress Broadcast Live Video plugin < 7.1.3 - Remote Code Execution (RCE) vulnerability](https://agentprime.io/advisories/CVE-2026-24937.md)
  `CVE-2026-24937` · CVE record: VideoWhisper.com Broadcast Live Video · CVSS 7.2 High · Not analysed yet · Published 25 May 2026 · Tags: Code injection
- [Dromara lamp-cloud Message Template GroovyClassLoader.parseClass special elements used in a template engine](https://agentprime.io/advisories/CVE-2026-9498.md)
  `CVE-2026-9498` · CVE record: Dromara lamp-cloud · CVSS 5.3 Medium · Not analysed yet · Published 25 May 2026 · Tags: Code injection, CWE-791
- [SourceCodester Student Grades Management System students.php cross site scripting](https://agentprime.io/advisories/CVE-2026-9485.md)
  `CVE-2026-9485` · CVE record: SourceCodester Student Grades Management System · CVSS 5.1 Medium · Not analysed yet · Published 25 May 2026 · Tags: Cross-site scripting (XSS), Code injection
- [yashpokharna2555 StudentManagementSystem student.php cross site scripting](https://agentprime.io/advisories/CVE-2026-9471.md)
  `CVE-2026-9471` · CVE record: yashpokharna2555 StudentManagementSystem · CVSS 5.1 Medium · Not analysed yet · Published 25 May 2026 · Tags: Cross-site scripting (XSS), Code injection
- [code-projects Employee Management System applyleave.php cross site scripting](https://agentprime.io/advisories/CVE-2026-9448.md)
  `CVE-2026-9448` · CVE record: code-projects Employee Management System · CVSS 5.3 Medium · Not analysed yet · Published 25 May 2026 · Tags: Cross-site scripting (XSS), Code injection
- [code-projects Employee Management System empproject.php cross site scripting](https://agentprime.io/advisories/CVE-2026-9419.md)
  `CVE-2026-9419` · CVE record: code-projects Employee Management System · CVSS 5.3 Medium · Not analysed yet · Published 25 May 2026 · Tags: Cross-site scripting (XSS), Code injection
- [code-projects Employee Management System changepassemp.php cross site scripting](https://agentprime.io/advisories/CVE-2026-9418.md)
  `CVE-2026-9418` · CVE record: code-projects Employee Management System · CVSS 5.3 Medium · Not analysed yet · Published 25 May 2026 · Tags: Cross-site scripting (XSS), Code injection
- [code-projects Employee Management System myprofileup.php cross site scripting](https://agentprime.io/advisories/CVE-2026-9417.md)
  `CVE-2026-9417` · CVE record: code-projects Employee Management System · CVSS 5.3 Medium · Not analysed yet · Published 25 May 2026 · Tags: Cross-site scripting (XSS), Code injection
- [code-projects Employee Management System myprofile.php cross site scripting](https://agentprime.io/advisories/CVE-2026-9416.md)
  `CVE-2026-9416` · CVE record: code-projects Employee Management System · CVSS 5.3 Medium · Not analysed yet · Published 25 May 2026 · Tags: Cross-site scripting (XSS), Code injection
- [code-projects Employee Management System eloginwel.php cross site scripting](https://agentprime.io/advisories/CVE-2026-9415.md)
  `CVE-2026-9415` · CVE record: code-projects Employee Management System · CVSS 5.3 Medium · Not analysed yet · Published 25 May 2026 · Tags: Cross-site scripting (XSS), Code injection
- [SourceCodester Indian Invoicing System Invoice Template Render Database-Backed add_order.php cross site scripting](https://agentprime.io/advisories/CVE-2026-9414.md)
  `CVE-2026-9414` · CVE record: SourceCodester Indian Invoicing System · CVSS 5.1 Medium · Not analysed yet · Published 25 May 2026 · Tags: Cross-site scripting (XSS), Code injection
- [SourceCodester Indian Invoicing System category.php cross site scripting](https://agentprime.io/advisories/CVE-2026-9413.md)
  `CVE-2026-9413` · CVE record: SourceCodester Indian Invoicing System · CVSS 5.3 Medium · Not analysed yet · Published 25 May 2026 · Tags: Cross-site scripting (XSS), Code injection
- [SourceCodester SUP Online Shopping productedit.php cross site scripting](https://agentprime.io/advisories/CVE-2026-9377.md)
  `CVE-2026-9377` · CVE record: SourceCodester SUP Online Shopping · CVSS 4.8 Medium · Not analysed yet · Published 24 May 2026 · Tags: Cross-site scripting (XSS), Code injection
- [vBulletin Login cross site scripting](https://agentprime.io/advisories/CVE-2026-9357.md)
  `CVE-2026-9357` · CVE record: vBulletin · CVSS 5.1 Medium · Not analysed yet · Published 24 May 2026 · Tags: Cross-site scripting (XSS), Code injection
- [546669204 vps-inventory-monitoring VpsTest Console VpsTest.php eval code injection](https://agentprime.io/advisories/CVE-2026-9302.md)
  `CVE-2026-9302` · CVE record: 546669204 vps-inventory-monitoring · CVSS 5.3 Medium · Not analysed yet · Published 23 May 2026 · Tags: Other injection, Code injection
- [Cross-Site Scripting in SketchUp Dynamic Components](https://agentprime.io/advisories/CVE-2026-9264.md)
  `CVE-2026-9264` · CVE record: Trimble SketchUp · CVSS 9.3 Critical · Critical (CVSS 9+) · Not analysed yet · Published 22 May 2026 · Tags: Code injection
- [Twig: Arbitrary PHP code execution via \`\_self.(\<string>)\` macro-reference compilation](https://agentprime.io/advisories/GHSA-45vw-wh46-2vx8.md)
  `GHSA-45vw-wh46-2vx8`, `CVE-2026-46640`, `PKSA-5k7f-wvjj-jrgw` · Packagist `twig/twig`: affected `>=3.15.0, <3.26.0`, fixed in `3.26.0` · CVSS 8.7 High · Not analysed yet · Published 21 May 2026 · Tags: Code injection
- [Twig: PHP code injection via \`{% use %}\` template name](https://agentprime.io/advisories/GHSA-7p85-w9px-jpjp.md)
  `GHSA-7p85-w9px-jpjp`, `CVE-2026-46633`, `PKSA-h8hf-ytnd-5t9q` · Packagist `twig/twig`: affected `>=1.15.1, <3.26.0`, fixed in `3.26.0` · CVSS 8.7 High · Not analysed yet · Published 21 May 2026 · Tags: Code injection
- [lmdeploy: Hardcoded trust_remote_code=True is an implicit unsafe remote-code load path with no user opt-out](https://agentprime.io/advisories/GHSA-9xq9-36w5-q796.md)
  `GHSA-9xq9-36w5-q796`, `CVE-2026-46517`, `PYSEC-2026-2608` · PyPI `lmdeploy`: affected `<0.13.0`, fixed in `0.13.0` · CVSS 7.8 High · Not analysed yet · Published 21 May 2026 · Tags: Code injection, Broken access control, CWE-1188
- [LMDeploy: Arbitrary code execution via hardcoded trust_remote_code=True in lmdeploy model initialization](https://agentprime.io/advisories/GHSA-m549-qq94-fvhg.md)
  `GHSA-m549-qq94-fvhg`, `CVE-2026-46432`, `PYSEC-2026-2609` · PyPI `lmdeploy`: affected `<0.13.0`, fixed in `0.13.0` · CVSS 7.8 High · Not analysed yet · Published 21 May 2026 · Tags: Code injection
- [Insufficient Validation of Member Zone Data May Cause Catalog Zone Transfer to Fail](https://agentprime.io/advisories/CVE-2026-42396.md)
  `CVE-2026-42396` · CVE record: PowerDNS Authoritative · CVSS 4.9 Medium · Not analysed yet · Published 21 May 2026 · Tags: Code injection
- [Trilium Notes: Stored XSS Leads to Unauthorized Remote Code Execution (RCE) via Unsanitized SVG Attachments](https://agentprime.io/advisories/CVE-2026-39311.md)
  `CVE-2026-39311` · CVE record: TriliumNext Trilium · CVSS 6.8 Medium · Not analysed yet · Published 20 May 2026 · Tags: Cross-site scripting (XSS), Code injection
- [Unauthenticated remote code execution via HEEx template injection in phoenix_storybook playground](https://agentprime.io/advisories/GHSA-55hg-8qxv-qj4p.md)
  `GHSA-55hg-8qxv-qj4p`, `CVE-2026-8467`, `EEF-CVE-2026-8467` · Hex `phoenix_storybook`: affected `>=0.5.0, <1.1.0`, fixed in `1.1.0` · CVSS 9.5 Critical · Critical (CVSS 9+) · Not analysed yet · Published 20 May 2026 · Tags: Code injection
- [CtrlPanel: Authenticated Remote Code Execution via Dynamic Class Instantiation in SettingsController.php](https://agentprime.io/advisories/CVE-2026-34216.md)
  `CVE-2026-34216` · CVE record: Ctrlpanel-gg panel · CVSS 6.6 Medium · Not analysed yet · Published 19 May 2026 · Tags: Code injection
- [Caddy CVE-2026-30852 Fix Bypass](https://agentprime.io/advisories/GHSA-wwhq-w58m-w29c.md)
  `GHSA-wwhq-w58m-w29c`, `GO-2026-5730` · Go `github.com/caddyserver/caddy/v2`: affected `>=2.11.0, <=2.11.2`, no fixed version yet · CVSS 4.0, no score published · Not analysed yet · Published 19 May 2026 · Tags: Code injection
- [ModelScope is vulnerable to arbitrary code injection via a crafted module](https://agentprime.io/advisories/GHSA-fhhq-h4hg-549x.md)
  `GHSA-fhhq-h4hg-549x`, `CVE-2025-51427`, `PYSEC-2026-2663` · PyPI `modelscope`: affected `<1.27.0`, fixed in `1.27.0` · CVSS 7.3 High · Not analysed yet · Published 19 May 2026 · Tags: Code injection, Insecure deserialization
- [GlassFish's Administration Console is Vulnerable to RCE](https://agentprime.io/advisories/GHSA-96v6-hq43-x9h4.md)
  `GHSA-96v6-hq43-x9h4`, `CVE-2026-2586` · Maven `org.glassfish.jsftemplating:jsftemplating` and 1 more: affected `<4.2.0`, fixed in `4.2.0` · CVSS 9.1 Critical · Critical (CVSS 9+) · Not analysed yet · Published 19 May 2026 · Tags: Code injection
- [GlassFish's gadget handler is vulnerable to RCE](https://agentprime.io/advisories/GHSA-29wv-cv7p-xjc2.md)
  `GHSA-29wv-cv7p-xjc2`, `CVE-2026-2587` · Maven `org.glassfish.jsftemplating:jsftemplating` and 1 more: affected `<4.2.0`, fixed in `4.2.0` · CVSS 9.6 Critical · Critical (CVSS 9+) · Not analysed yet · Published 19 May 2026 · Tags: Code injection
- [Angular template injection in Reports in Guardian/CMC before 26.1.0](https://agentprime.io/advisories/CVE-2025-40900.md)
  `CVE-2025-40900` · CVE record: Nozomi Networks Guardian and 1 more · CVSS 5.1 Medium · Not analysed yet · Published 19 May 2026 · Tags: Code injection
- [Apache OFBiz: Improper Validation in traverseContent Service Enables Authenticated Groovy Code Execution](https://agentprime.io/advisories/CVE-2026-46586.md)
  `CVE-2026-46586` · CVE record: Apache Software Foundation Apache OFBiz · CVSS 8.8 High · Not analysed yet · Published 19 May 2026 · Tags: Code injection
- [Apache OFBiz: Authenticated Remote Code Execution via Unsafe Template Expansion in email services](https://agentprime.io/advisories/CVE-2026-35086.md)
  `CVE-2026-35086` · CVE record: Apache Software Foundation Apache OFBiz · CVSS 6.5 Medium · Not analysed yet · Published 19 May 2026 · Tags: Code injection
- [Apache OFBiz: FreeMarker SSTI via Duplicate Parameter Sanitization Bypass](https://agentprime.io/advisories/CVE-2026-31380.md)
  `CVE-2026-31380` · CVE record: Apache Software Foundation Apache OFBiz · CVSS 6.5 Medium · Not analysed yet · Published 19 May 2026 · Tags: Code injection
- [Apache OFBiz: Path Traversal and File Upload Validation Bypass Leading to Arbitrary File Write, Stored XSS and RCE in Catalog Manager](https://agentprime.io/advisories/CVE-2026-31379.md)
  `CVE-2026-31379` · CVE record: Apache Software Foundation Apache OFBiz · CVSS 6.1 Medium · Not analysed yet · Published 19 May 2026 · Tags: Path traversal, Cross-site scripting (XSS), Code injection
- [Apache OFBiz: Low-Privilege SSTI Leading to RCE in the Content Component](https://agentprime.io/advisories/CVE-2026-29207.md)
  `CVE-2026-29207` · CVE record: Apache Software Foundation Apache OFBiz · CVSS 6.5 Medium · Not analysed yet · Published 19 May 2026 · Tags: Code injection
- [AutoGPT Platform: Remote Code Execution via Unsafe Pickle Deserialization of Redis Cache Entries](https://agentprime.io/advisories/CVE-2026-33233.md)
  `CVE-2026-33233` · CVE record: Significant-Gravitas AutoGPT · CVSS 7.6 High · Not analysed yet · Published 19 May 2026 · Tags: Code injection, Insecure deserialization, CWE-345
- [scalar/astro v0.1.13 was discovered to contain an arbitrary file upload vulnerability in the the scalar_url query parameter of the Scalar Proxy endpoint.](https://agentprime.io/advisories/CVE-2026-30117.md)
  `CVE-2026-30117` · CVE record · CVSS 9.8 Critical · Critical (CVSS 9+) · Not analysed yet · Published 19 May 2026 · Tags: Code injection
- [ChromaDB Python project has a pre-authentication code injection vulnerability](https://agentprime.io/advisories/GHSA-f4j7-r4q5-qw2c.md)
  `GHSA-f4j7-r4q5-qw2c`, `CVE-2026-45829`, `PYSEC-2026-311` · PyPI `chromadb`: affected `>=1.0.0, <=1.5.9`, no fixed version yet · CVSS 10.0 Critical · Critical (CVSS 9+, CVSS 7+ and EPSS) · EPSS 0.15 · Not analysed yet · Published 18 May 2026 · Tags: Code injection, Insecure deserialization
- [Budibase: CouchDB Reduce Injection via Unsanitized Calculation Parameter in V1 Views API](https://agentprime.io/advisories/GHSA-363w-hvwh-w7m6.md)
  `GHSA-363w-hvwh-w7m6`, `CVE-2026-45719` · npm `@budibase/server`: affected `<3.38.1`, fixed in `3.38.1` · CVSS 6.5 Medium · Not analysed yet · Published 18 May 2026 · Tags: Code injection
- [Formie: Pre-authenticated server-side template injection in Hidden fields](https://agentprime.io/advisories/GHSA-x7m9-mwc2-g6w2.md)
  `GHSA-x7m9-mwc2-g6w2`, `CVE-2026-45697`, `PKSA-snft-3cv8-v5p5` · Packagist `verbb/formie`: affected `<2.2.20 || >=3.0.0-beta.1, <3.1.24`, fixed in `2.2.20`, `3.1.24` · CVSS 9.8 Critical · Critical (CVSS 9+) · Not analysed yet · Published 18 May 2026 · Tags: Code injection, CWE-693
- [Microsoft Edge (Chromium-based) Remote Code Execution Vulnerability](https://agentprime.io/advisories/CVE-2026-45495.md)
  `CVE-2026-45495` · CVE record: Microsoft Microsoft Edge (Chromium-based) · CVSS 8.8 High · Not analysed yet · Published 18 May 2026 · Tags: Path traversal, Code injection, Memory corruption, CWE-20
- [Code Injection in Perforce P4 (Helix Core)](https://agentprime.io/advisories/CVE-2026-6902.md)
  `CVE-2026-6902` · CVE record: Perforce P4 (Helix Core) · CVSS 7.7 High · Not analysed yet · Published 18 May 2026 · Tags: Code injection
- [Offline Hospital Management System 5.3.0 allows remote code execution due to an improper Electron renderer configuration.](https://agentprime.io/advisories/CVE-2026-26462.md)
  `CVE-2026-26462` · CVE record · CVSS 7.3 High · Not analysed yet · Published 18 May 2026 · Tags: Code injection
- [Beetl's SpELFunction extension function has an expression injection risk](https://agentprime.io/advisories/GHSA-fmmw-44rp-jcfp.md)
  `GHSA-fmmw-44rp-jcfp`, `CVE-2026-8759` · Maven `com.ibeetl:beetl-spring-classic`: affected `<=3.20.2.RELEASE`, no fixed version yet · CVSS 6.9 Medium · Not analysed yet · Published 17 May 2026 · Tags: Code injection, CWE-20
- [ACL Analytics 11.x - 13.0.0.579 Arbitrary Code Execution](https://agentprime.io/advisories/CVE-2018-25320.md)
  `CVE-2018-25320` · CVE record: acl ACL Analytics · CVSS 9.3 Critical · Critical (CVSS 9+) · Not analysed yet · Published 17 May 2026 · Tags: Code injection
- [Sanluan PublicCMS templateResult API TemplateResultDirective.java execute special elements used in a template engine](https://agentprime.io/advisories/CVE-2026-8740.md)
  `CVE-2026-8740` · CVE record: Sanluan PublicCMS · CVSS 5.3 Medium · Not analysed yet · Published 17 May 2026 · Tags: Code injection, CWE-791
- [python jsonpickle 2.0.0 Remote Code Execution via py/repr](https://agentprime.io/advisories/CVE-2021-47952.md)
  `CVE-2021-47952` · CVE record: Jsonpickle python jsonpickle · CVSS 9.3 Critical · Critical (CVSS 9+) · Not analysed yet · Published 16 May 2026 · Tags: Code injection, Insecure deserialization
- [Schlix CMS 2.2.6-6 Remote Code Execution via core.blockmanager](https://agentprime.io/advisories/CVE-2021-47964.md)
  `CVE-2021-47964` · CVE record: Schlix Schlix CMS · CVSS 8.7 High · Not analysed yet · Published 15 May 2026 · Tags: Code injection
- [Apache Flink: Remote code execution via SQL injection in code generation](https://agentprime.io/advisories/GHSA-2f54-v4hm-fx73.md)
  `GHSA-2f54-v4hm-fx73`, `BIT-flink-2026-35194`, `CVE-2026-35194` · Maven `org.apache.flink:flink-table-api-java` and 2 more: affected `>=1.15.0, <1.20.4 || >=2.0.0, <2.0.2 || >=2.1.0, <2.1.2 || >=2.2.0, <2.2.1`, fixed in `1.20.4`, `2.0.2`, `2.1.2`, `2.2.1` · CVSS 8.1 High · Not analysed yet · Published 15 May 2026 · Tags: Code injection

Newest: <https://agentprime.io/advisories/tag/code-injection.md>
Older: <https://agentprime.io/advisories/tag/code-injection.md?cursor=WyIyMDI2LTA1LTE1VDE4OjMwOjM0LjAwMDAwMFoiLCJHSFNBLTJmNTQtdjRobS1meDczIl0>

## Filters and formats

Filters are query parameters on this URL: `q` (words, as in a web search engine: `"a phrase"`, `OR`, `-word`; an id; a package or product name), `severity` (low, medium, high or critical), `critical=1`, `kev=1`, `ecosystem` (npm, pypi, packagist, go, maven, rubygems, crates, nuget, hex), `kind=package`, `assigner` (a CNA’s short name), `min_score` and `state`. Each record’s title links to its Markdown page.

- The same list as JSON: <https://api.agentprime.io/v1/advisories?tag=code-injection&cursor=WyIyMDI2LTA1LTI2VDE4OjAwOjEzLjQwNjAwMFoiLCJDVkUtMjAyNi05NTY4Il0>
- Every list: <https://agentprime.io/advisories.md>, critical: <https://agentprime.io/advisories/critical.md>; by weakness: <https://agentprime.io/advisories/tag/sql-injection.md> and the other tags in <https://agentprime.io/llms.txt>; by technology: `/advisories/technology/<slug>.md` (`fortinet-fortimail`)

---

The web page: <https://agentprime.io/advisories/tag/code-injection/?cursor=WyIyMDI2LTA1LTI2VDE4OjAwOjEzLjQwNjAwMFoiLCJDVkUtMjAyNi05NTY4Il0>. Everything for agents: <https://agentprime.io/llms.txt>.