# Code injection.

Untrusted input evaluated as code: eval, templates, expression languages. Every Advisory and CVE whose weakness (CWE) is one of these, newest first.

## Records, newest first (an older page)

- [Cursor Desktop sandbox escape via Claude hook configuration](https://agentprime.io/advisories/CVE-2026-48124.md)
  `CVE-2026-48124` · CVE record: cursor cursor · CVSS 8.5 High · Not analysed yet · Published 15 Jun 2026 · Tags: Code injection, CWE-829
- [WordPress WooCommerce PDF Invoice Builder plugin <= 2.0.8 - Remote Code Execution (RCE) vulnerability](https://agentprime.io/advisories/CVE-2026-52704.md)
  `CVE-2026-52704` · CVE record: Edgar Rojas WooCommerce PDF Invoice Builder · CVSS 10.0 Critical · Critical (CVSS 9+) · Not analysed yet · Published 15 Jun 2026 · Tags: Code injection
- [Insecure Deserialisation via Plaintext HTTP leading to Remote Code Execution in Quick.CMS](https://agentprime.io/advisories/CVE-2026-11860.md)
  `CVE-2026-11860` · CVE record: OpenSolution Quick.CMS · CVSS 7.5 High · Not analysed yet · Published 15 Jun 2026 · Tags: Code injection, Insecure deserialization
- [Subrion CMS vulnerable to Cross-site Scripting](https://agentprime.io/advisories/GHSA-wrcg-234w-hfhq.md)
  `GHSA-wrcg-234w-hfhq`, `CVE-2026-12202`, `PKSA-9dbm-kft4-ck43` · Packagist `intelliants/subrion`: affected `<=4.0.3`, no fixed version yet · CVSS 4.8 Medium · Not analysed yet · Published 15 Jun 2026 · Tags: Cross-site scripting (XSS), Code injection
- [jsonata: Function Binding Prototype Pollution via hasOwnProperty Override](https://agentprime.io/advisories/GHSA-663r-x48j-fg8p.md)
  `GHSA-663r-x48j-fg8p`, `CVE-2026-12208` · npm `jsonata`: affected `<1.8.8 || >=2.0.0, <2.2.1`, fixed in `1.8.8`, `2.2.1` · CVSS 6.9 Medium · Not analysed yet · Published 15 Jun 2026 · Tags: Code injection, Prototype pollution
- [RubyLouvre avalon Template Filter index.js prototype pollution](https://agentprime.io/advisories/CVE-2026-12209.md)
  `CVE-2026-12209` · CVE record: RubyLouvre avalon · CVSS 6.9 Medium · Not analysed yet · Published 15 Jun 2026 · Tags: Code injection, Prototype pollution
- [An issue in the loopback request handling component of fossar selfoss v2.20-SNAPSHOT allows attackers to execute arbitrary commands and obtain sensitive information via supplying a crafted HTTP reque…](https://agentprime.io/advisories/CVE-2026-50872.md)
  `CVE-2026-50872` · CVE record · CVSS 9.8 Critical · Critical (CVSS 9+) · Not analysed yet · Published 15 Jun 2026 · Tags: Code injection
- [An OS command injection vulnerability in the media archiving and export pipeline component of kanishka-linux Reminiscence v0.3.0 allows attackers to execute arbitrary commands via supplying a crafted…](https://agentprime.io/advisories/CVE-2026-50871.md)
  `CVE-2026-50871` · CVE record · CVSS 9.8 Critical · Critical (CVSS 9+) · Not analysed yet · Published 15 Jun 2026 · Tags: Code injection
- [SourceCodester CET Automated Grading System with AI Predictive Analytics index.php cross site scripting](https://agentprime.io/advisories/CVE-2026-12176.md)
  `CVE-2026-12176` · CVE record: SourceCodester CET Automated Grading System with AI Predictive Analytics · CVSS 5.3 Medium · Not analysed yet · Published 13 Jun 2026 · Tags: Cross-site scripting (XSS), Code injection
- [CodeAstro Human Resource Management System Projects Management Add_Projects cross site scripting](https://agentprime.io/advisories/CVE-2026-12130.md)
  `CVE-2026-12130` · CVE record: CodeAstro Human Resource Management System · CVSS 5.1 Medium · Not analysed yet · Published 12 Jun 2026 · Tags: Cross-site scripting (XSS), Code injection
- [CodeAstro Human Resource Management System Dashboard add_tod cross site scripting](https://agentprime.io/advisories/CVE-2026-12129.md)
  `CVE-2026-12129` · CVE record: CodeAstro Human Resource Management System · CVSS 5.1 Medium · Not analysed yet · Published 12 Jun 2026 · Tags: Cross-site scripting (XSS), Code injection
- [Kitty vulnerable to command injection via unsanitized OSC 21 query reply](https://agentprime.io/advisories/CVE-2026-54057.md)
  `CVE-2026-54057` · CVE record: kovidgoyal kitty · CVSS 7.3 High · Not analysed yet · Published 12 Jun 2026 · Tags: Code injection, CWE-150
- [@kitty-edit DCS + --color=geninclude vulnerable to Unauthenticated in-process RCE](https://agentprime.io/advisories/CVE-2026-42851.md)
  `CVE-2026-42851` · CVE record: kovidgoyal kitty · CVSS 7.8 High · Not analysed yet · Published 12 Jun 2026 · Tags: Code injection, Broken access control
- [ChromaDB has a code injection vulnerability](https://agentprime.io/advisories/GHSA-36p7-vc44-83pf.md)
  `GHSA-36p7-vc44-83pf`, `CVE-2026-45833`, `PYSEC-2026-3814` · PyPI `chromadb`: affected `>=0.4.17, <=1.5.9`, no fixed version yet · CVSS 9.4 Critical · Critical (CVSS 9+) · Not analysed yet · Published 12 Jun 2026 · Tags: Code injection
- [Vim: Arbitrary Code Execution via Python Omni-Completion](https://agentprime.io/advisories/CVE-2026-52860.md)
  `CVE-2026-52860` · CVE record: vim vim · CVSS 7.5 High · Not analysed yet · Published 11 Jun 2026 · Tags: Code injection
- [Vim: Arbitrary Code Execution via Python Omni-Completion](https://agentprime.io/advisories/CVE-2026-52858.md)
  `CVE-2026-52858` · CVE record: vim vim · CVSS 7.3 High · Not analysed yet · Published 11 Jun 2026 · Tags: Code injection, CWE-829
- [Vim: Vimscript Code Injection in netrw NetrwBookHistSave() via crafted directory name](https://agentprime.io/advisories/CVE-2026-47162.md)
  `CVE-2026-47162` · CVE record: vim vim · CVSS 7.3 High · Not analysed yet · Published 11 Jun 2026 · Tags: Other injection, Code injection, CWE-140
- [Vim: Vimscript Code Injection in cucumber filetype plugin via crafted step-definition regex](https://agentprime.io/advisories/CVE-2026-47167.md)
  `CVE-2026-47167` · CVE record: vim vim · CVSS 5.1 Medium · Not analysed yet · Published 11 Jun 2026 · Tags: Code injection
- [OpenZeppelin Contracts Wizard has Code Injection in Generated Hardhat and Foundry Tests via Unsanitized opts.name / opts.uri](https://agentprime.io/advisories/GHSA-4x76-22x2-rx8v.md)
  `GHSA-4x76-22x2-rx8v`, `CVE-2026-48054` · npm `@openzeppelin/wizard`: affected `<0.10.9`, fixed in `0.10.9` · CVSS 8.8 High · Not analysed yet · Published 11 Jun 2026 · Tags: Code injection
- [PDM: Project-Controlled \`.pdm-plugins\` Content Executes Before CLI Parsing](https://agentprime.io/advisories/GHSA-qq6c-99pv-prvf.md)
  `GHSA-qq6c-99pv-prvf`, `CVE-2026-47781`, `PYSEC-2026-2863` · PyPI `pdm`: affected `<2.27.0`, fixed in `2.27.0` · CVSS 8.4 High · Not analysed yet · Published 11 Jun 2026 · Tags: Code injection, CWE-829
- [SSTI in Soagen Informatics' Apinizer](https://agentprime.io/advisories/CVE-2026-11561.md)
  `CVE-2026-11561` · CVE record: Soagen Informatics Technologies Software and Consulting Inc. Apinizer · CVSS 9.8 Critical · Critical (CVSS 9+) · Not analysed yet · Published 11 Jun 2026 · Tags: Code injection
- [Spring Web Flow has Data Binding Vulnerability with Unified EL Parser](https://agentprime.io/advisories/GHSA-9ggw-87m9-9gfc.md)
  `GHSA-9ggw-87m9-9gfc`, `CVE-2026-40985` · Maven `org.springframework.webflow:spring-webflow`: affected `>=4.0.0, <4.0.1 || >=3.0.0, <3.0.2 || <=2.5.1`, fixed in `4.0.1`, `3.0.2` · CVSS 6.4 Medium · Not analysed yet · Published 11 Jun 2026 · Tags: Code injection
- [Apache OFBiz: DataResource Low-Privileged Authenticated FreeMarker Template Injection Leads to Remote Code Execution](https://agentprime.io/advisories/CVE-2026-50223.md)
  `CVE-2026-50223` · CVE record: Apache Software Foundation Apache OFBiz · CVSS 8.8 High · Not analysed yet · Published 10 Jun 2026 · Tags: Code injection
- [Roxy-WI: Authenticated RCE on every managed HAProxy load balancer via \`option\` field config injection in section save](https://agentprime.io/advisories/CVE-2026-45558.md)
  `CVE-2026-45558` · CVE record: roxy-wi roxy-wi · CVSS 9.9 Critical · Critical (CVSS 9+) · Not analysed yet · Published 10 Jun 2026 · Tags: Command injection, Code injection, CWE-20
- [Spring Data KeyValue: Remote code execution via SpEL Injection in Sort-based repository queries](https://agentprime.io/advisories/GHSA-xg2j-3hj6-pc24.md)
  `GHSA-xg2j-3hj6-pc24`, `CVE-2026-41719` · Maven `org.springframework.data:spring-data-keyvalue`: affected `>=4.0.0, <4.0.6 || >=3.5.0, <3.5.12 || >=3.4.0, <=3.4.14 || >=3.0.0, <=3.3.16 || <=2.7.19`, fixed in `4.0.6`, `3.5.12` · CVSS 6.4 Medium · Not analysed yet · Published 10 Jun 2026 · Tags: Code injection
- [Spring Data REST is vulnerable to SpEL expression injection through map-typed properties when processing JSON Patch requests](https://agentprime.io/advisories/GHSA-j388-8rm5-p97f.md)
  `GHSA-j388-8rm5-p97f`, `CVE-2026-41729` · Maven `org.springframework.data:spring-data-rest-core`: affected `>=5.0.0, <5.0.6 || >=4.5.0, <4.5.12 || >=4.4.0, <=4.4.14 || >=4.3.0, <=4.3.16 || <=3.7.19`, fixed in `5.0.6`, `4.5.12` · CVSS 8.1 High · Not analysed yet · Published 10 Jun 2026 · Tags: Code injection
- [Spring Data MongoDB is vulnerable to SpEL (Spring Expression Language) expression injection](https://agentprime.io/advisories/GHSA-5whc-4q84-fj73.md)
  `GHSA-5whc-4q84-fj73`, `CVE-2026-41717` · Maven `org.springframework.data:spring-data-mongodb`: affected `>=5.0.0, <5.0.6 || >=4.5.0, <4.5.12 || >=4.4.0, <=4.4.14 || >=4.0.0, <=4.3.16 || <=3.4.19`, fixed in `5.0.6`, `4.5.12` · CVSS 8.1 High · Not analysed yet · Published 10 Jun 2026 · Tags: Code injection
- [Visual Studio Code MSSQL Extension Remote Code Execution Vulnerability](https://agentprime.io/advisories/CVE-2026-47292.md)
  `CVE-2026-47292` · CVE record: Microsoft Visual Studio Code - MSSQL Extension · CVSS 7.8 High · Not analysed yet · Published 9 Jun 2026 · Tags: Code injection, CWE-829
- [Microsoft Exchange Server Remote Code Execution Vulnerability](https://agentprime.io/advisories/CVE-2026-45583.md)
  `CVE-2026-45583` · CVE record: Microsoft Microsoft Exchange Server 2016 Cumulative Update 23 and 3 more · CVSS 7.5 High · Not analysed yet · Published 9 Jun 2026 · Tags: Code injection
- [Insufficient Input Validation Allows Unauthorized Modification of Router Software in certain NETGEAR Routers](https://agentprime.io/advisories/CVE-2026-0414.md)
  `CVE-2026-0414` · CVE record: NETGEAR RBE970 · CVSS 4.3 Medium · Not analysed yet · Published 9 Jun 2026 · Tags: Code injection
- [WordPress Insert PHP Plugin < 2.5.1 PHP Code Injection via REST API](https://agentprime.io/advisories/CVE-2017-20251.md)
  `CVE-2017-20251` · CVE record: Themeisle Woody Code Snippets · CVSS 9.3 Critical · Critical (CVSS 9+) · Not analysed yet · Published 9 Jun 2026 · Tags: Code injection
- [Injection in Rapid7 Velociraptor](https://agentprime.io/advisories/CVE-2026-8795.md)
  `CVE-2026-8795` · CVE record: Rapid7 Velociraptor · CVSS 7.8 High · Not analysed yet · Published 9 Jun 2026 · Tags: Other injection, Code injection, CWE-116
- [Code injection in Google Chrome](https://agentprime.io/advisories/CVE-2026-11688.md)
  `CVE-2026-11688` · CVE record: Google Chrome · CVSS 8.8 High · Not analysed yet · Published 8 Jun 2026 · Tags: Code injection
- [nebula-mesh: Host advanced overrides allow YAML injection into agent config.yml](https://agentprime.io/advisories/GHSA-7hp6-g3pq-3pc3.md)
  `GHSA-7hp6-g3pq-3pc3`, `CVE-2026-47722`, `GO-2026-5223` · Go `github.com/juev/nebula-mesh`: affected `<0.3.2`, fixed in `0.3.2` · CVSS 8.7 High · Not analysed yet · Published 8 Jun 2026 · Tags: Code injection
- [Anyquery: AppleScript/JXA Code Injection via Unescaped URL in macOS Chrome Plugin](https://agentprime.io/advisories/GHSA-hrj8-hjv8-mgwc.md)
  `GHSA-hrj8-hjv8-mgwc`, `CVE-2026-47252`, `GO-2026-5436` · Go `github.com/julien040/anyquery/plugins/brave` and 3 more: affected `<0.0.0-20240826075852-c651df0b8767`, fixed in `0.0.0-20240826075852-c651df0b8767` · CVSS 9.0 Critical · Critical (CVSS 9+) · Not analysed yet · Published 8 Jun 2026 · Tags: Code injection
- [actual Allows Electron to Run As Node](https://agentprime.io/advisories/GHSA-7rvm-xjpp-63r9.md)
  `GHSA-7rvm-xjpp-63r9`, `CVE-2026-42890` · npm `actual`: affected `<26.5.0`, fixed in `26.5.0` · CVSS 4.8 Medium · Not analysed yet · Published 8 Jun 2026 · Tags: Code injection, Privilege escalation, CWE-693
- [OpenBullet2 0.3.2 Authenticated RCE via Job Configuration Interface](https://agentprime.io/advisories/CVE-2026-25856.md)
  `CVE-2026-25856` · CVE record: openbullet openbullet2 · CVSS 8.7 High · Not analysed yet · Published 8 Jun 2026 · Tags: Code injection
- [imvks786 student_management_system add.php cross site scripting](https://agentprime.io/advisories/CVE-2026-11534.md)
  `CVE-2026-11534` · CVE record: imvks786 student_management_system · CVSS 5.1 Medium · Not analysed yet · Published 8 Jun 2026 · Tags: Cross-site scripting (XSS), Code injection
- [SourceCodester Inventory System header.php cross site scripting](https://agentprime.io/advisories/CVE-2026-11520.md)
  `CVE-2026-11520` · CVE record: SourceCodester Inventory System · CVSS 5.1 Medium · Not analysed yet · Published 8 Jun 2026 · Tags: Cross-site scripting (XSS), Code injection
- [SourceCodester Inventory System User Management users.php cross site scripting](https://agentprime.io/advisories/CVE-2026-11518.md)
  `CVE-2026-11518` · CVE record: SourceCodester Inventory System · CVSS 5.3 Medium · Not analysed yet · Published 8 Jun 2026 · Tags: Cross-site scripting (XSS), Code injection
- [itsourcecode Hospital Management System billing.php cross site scripting](https://agentprime.io/advisories/CVE-2026-11512.md)
  `CVE-2026-11512` · CVE record: itsourcecode Hospital Management System · CVSS 5.3 Medium · Not analysed yet · Published 8 Jun 2026 · Tags: Cross-site scripting (XSS), Code injection
- [CodeAstro Human Resource Management System Notice Board Management All_notice cross site scripting](https://agentprime.io/advisories/CVE-2026-11491.md)
  `CVE-2026-11491` · CVE record: CodeAstro Human Resource Management System · CVSS 4.8 Medium · Not analysed yet · Published 8 Jun 2026 · Tags: Cross-site scripting (XSS), Code injection
- [SourceCodester Hospitals Patient Records Management System page room_types cross site scripting](https://agentprime.io/advisories/CVE-2026-11468.md)
  `CVE-2026-11468` · CVE record: SourceCodester Hospitals Patient Records Management System · CVSS 4.8 Medium · Not analysed yet · Published 7 Jun 2026 · Tags: Cross-site scripting (XSS), Code injection
- [Mage AI Sign-in Flow index.tsx useMutation cross site scripting](https://agentprime.io/advisories/CVE-2026-11436.md)
  `CVE-2026-11436` · CVE record: Mage AI · CVSS 5.3 Medium · Not analysed yet · Published 6 Jun 2026 · Tags: Cross-site scripting (XSS), Code injection
- [FluentCMS Blocks Plugin blocks cross site scripting](https://agentprime.io/advisories/CVE-2026-11434.md)
  `CVE-2026-11434` · CVE record: FluentCMS · CVSS 4.8 Medium · Not analysed yet · Published 6 Jun 2026 · Tags: Cross-site scripting (XSS), Code injection
- [Markdown Preview Enhanced 0.8.x Code Injection via WaveDrom Rendering](https://agentprime.io/advisories/CVE-2026-11422.md)
  `CVE-2026-11422` · CVE record: shd101wyy Markdown Preview Enhanced and 1 more · CVSS 8.4 High · Not analysed yet · Published 5 Jun 2026 · Tags: Code injection
- [Markdown Preview Enhanced Arbitrary Code Execution via WaveDrom eval()](https://agentprime.io/advisories/CVE-2026-50733.md)
  `CVE-2026-50733` · CVE record: shd101wyy Markdown Preview Enhanced · CVSS 8.6 High · Not analysed yet · Published 5 Jun 2026 · Tags: Code injection
- [Markdown Preview Enhanced Arbitrary Code Execution via Bitfield interpretJS()](https://agentprime.io/advisories/CVE-2026-49493.md)
  `CVE-2026-49493` · CVE record: shd101wyy Markdown Preview Enhanced · CVSS 8.6 High · Not analysed yet · Published 5 Jun 2026 · Tags: Code injection
- [DbGate: Remote Code Execution via functionName injection in loadReader endpoint](https://agentprime.io/advisories/GHSA-hv83-ggc4-v385.md)
  `GHSA-hv83-ggc4-v385`, `CVE-2026-48017` · npm `dbgate-api`: affected `<7.1.9`, fixed in `7.1.9` · CVSS 8.8 High · Not analysed yet · Published 5 Jun 2026 · Tags: Code injection
- [DbGate: Unauthenticated Remote Code Execution via JSON Script Runner](https://agentprime.io/advisories/GHSA-8v3q-9vmx-36vc.md)
  `GHSA-8v3q-9vmx-36vc`, `CVE-2026-47668` · npm `dbgate-serve`: affected `<7.1.9`, fixed in `7.1.9` · CVSS 10.0 Critical · Critical (CVSS 9+) · Not analysed yet · Published 5 Jun 2026 · Tags: Code injection, CWE-20, CWE-1188
- [SourceCodester Ship Ferry Ticket Reservation System manage_user cross site scripting](https://agentprime.io/advisories/CVE-2026-11338.md)
  `CVE-2026-11338` · CVE record: SourceCodester Ship Ferry Ticket Reservation System · CVSS 4.8 Medium · Not analysed yet · Published 5 Jun 2026 · Tags: Cross-site scripting (XSS), Code injection
- [tittuvarghese CollegeManagementSystem fetch.php cross site scripting](https://agentprime.io/advisories/CVE-2026-11337.md)
  `CVE-2026-11337` · CVE record: tittuvarghese CollegeManagementSystem · CVSS 5.3 Medium · Not analysed yet · Published 5 Jun 2026 · Tags: Cross-site scripting (XSS), Code injection
- [Command injection in Profile change function](https://agentprime.io/advisories/CVE-2026-8914.md)
  `CVE-2026-8914` · CVE record: Teltonika Networks RUTOS and 1 more · CVSS 8.4 High · Not analysed yet · Published 5 Jun 2026 · Tags: Code injection
- [Code injection in Google Chrome](https://agentprime.io/advisories/CVE-2026-11231.md)
  `CVE-2026-11231` · CVE record: Google Chrome · CVSS 8.1 High · Not analysed yet · Published 4 Jun 2026 · Tags: Code injection
- [Improper input validation in Google Chrome](https://agentprime.io/advisories/CVE-2026-11218.md)
  `CVE-2026-11218` · CVE record: Google Chrome · CVSS 6.8 Medium · Not analysed yet · Published 4 Jun 2026 · Tags: Code injection, CWE-20
- [Code injection in Google Chrome](https://agentprime.io/advisories/CVE-2026-11157.md)
  `CVE-2026-11157` · CVE record: Google Chrome · CVSS 5.4 Medium · Not analysed yet · Published 4 Jun 2026 · Tags: Code injection
- [Code injection in Google Chrome](https://agentprime.io/advisories/CVE-2026-10928.md)
  `CVE-2026-10928` · CVE record: Google Chrome · CVSS 8.8 High · Not analysed yet · Published 4 Jun 2026 · Tags: Code injection
- [Code injection in Google Chrome](https://agentprime.io/advisories/CVE-2026-10904.md)
  `CVE-2026-10904` · CVE record: Google Chrome · CVSS 8.8 High · Not analysed yet · Published 4 Jun 2026 · Tags: Code injection, Memory corruption, CWE-20
- [Tautulli Vulnerable to Unauthenticated/Authenticated Remote Code Execution via Newsletter Custom Template Directory](https://agentprime.io/advisories/CVE-2026-41065.md)
  `CVE-2026-41065` · CVE record: Tautulli Tautulli · CVSS 8.9 High · Not analysed yet · Published 4 Jun 2026 · Tags: Code injection
- [itsourcecode Fees Management System navbar.php cross site scripting](https://agentprime.io/advisories/CVE-2026-10810.md)
  `CVE-2026-10810` · CVE record: itsourcecode Fees Management System · CVSS 5.3 Medium · Not analysed yet · Published 4 Jun 2026 · Tags: Cross-site scripting (XSS), Code injection

Newest: <https://agentprime.io/advisories/tag/code-injection.md>
Older: <https://agentprime.io/advisories/tag/code-injection.md?cursor=WyIyMDI2LTA2LTA0VDEzOjE1OjEwLjg2MTAwMFoiLCJDVkUtMjAyNi0xMDgxMCJd>

## Filters and formats

Filters are query parameters on this URL: `q` (words, as in a web search engine: `"a phrase"`, `OR`, `-word`; an id; a package or product name), `severity` (low, medium, high or critical), `critical=1`, `kev=1`, `ecosystem` (npm, pypi, packagist, go, maven, rubygems, crates, nuget, hex), `kind=package`, `assigner` (a CNA’s short name), `min_score` and `state`. Each record’s title links to its Markdown page.

- The same list as JSON: <https://api.agentprime.io/v1/advisories?tag=code-injection&cursor=WyIyMDI2LTA2LTE1VDIwOjEzOjU0LjAwMDAwMFoiLCJHSFNBLXByNTktaDlwaC0zZnI4Il0>
- Every list: <https://agentprime.io/advisories.md>, critical: <https://agentprime.io/advisories/critical.md>; by weakness: <https://agentprime.io/advisories/tag/sql-injection.md> and the other tags in <https://agentprime.io/llms.txt>; by technology: `/advisories/technology/<slug>.md` (`fortinet-fortimail`)

---

The web page: <https://agentprime.io/advisories/tag/code-injection/?cursor=WyIyMDI2LTA2LTE1VDIwOjEzOjU0LjAwMDAwMFoiLCJHSFNBLXByNTktaDlwaC0zZnI4Il0>. Everything for agents: <https://agentprime.io/llms.txt>.