# Code injection.

Untrusted input evaluated as code: eval, templates, expression languages. Every Advisory and CVE whose weakness (CWE) is one of these, newest first.

## Records, newest first (an older page)

- [Meshtastic GitHub repo vulnerable to Arbitrary Code Execution via pull_request_target Fork Checkout in CI Workflow](https://agentprime.io/advisories/CVE-2026-44359.md)
  `CVE-2026-44359` · CVE record: meshtastic firmware · CVSS 10.0 Critical · Critical (CVSS 9+) · Not analysed yet · Published 19 Jul 2026 · Tags: Code injection, CWE-829
- [itsourcecode Courier Management System index.php cross site scripting](https://agentprime.io/advisories/CVE-2026-16229.md)
  `CVE-2026-16229` · CVE record: itsourcecode Courier Management System · CVSS 5.3 Medium · Not analysed yet · Published 19 Jul 2026 · Tags: Cross-site scripting (XSS), Code injection
- [code-projects Online Examination System account.php cross site scripting](https://agentprime.io/advisories/CVE-2026-16220.md)
  `CVE-2026-16220` · CVE record: code-projects Online Examination System · CVSS 5.3 Medium · Not analysed yet · Published 19 Jul 2026 · Tags: Cross-site scripting (XSS), Code injection
- [Pluck CMS Albums albums.admin.php htmlspecialchars_decode cross site scripting](https://agentprime.io/advisories/CVE-2026-16205.md)
  `CVE-2026-16205` · CVE record: Pluck CMS · CVSS 4.8 Medium · Not analysed yet · Published 19 Jul 2026 · Tags: Cross-site scripting (XSS), Code injection
- [zevorn rt-claw Telegram-to-AI Tool Execution Flow script.c tool_run_script_execute code injection](https://agentprime.io/advisories/CVE-2026-16204.md)
  `CVE-2026-16204` · CVE record: zevorn rt-claw · CVSS 5.3 Medium · Not analysed yet · Published 19 Jul 2026 · Tags: Other injection, Code injection
- [SourceCodester Class and Exam Timetabling System forCYS.php cross site scripting](https://agentprime.io/advisories/CVE-2026-16203.md)
  `CVE-2026-16203` · CVE record: SourceCodester Class and Exam Timetabling System · CVSS 5.1 Medium · Not analysed yet · Published 19 Jul 2026 · Tags: Cross-site scripting (XSS), Code injection
- [SourceCodester Class and Exam Timetabling System CYS.php cross site scripting](https://agentprime.io/advisories/CVE-2026-16202.md)
  `CVE-2026-16202` · CVE record: SourceCodester Class and Exam Timetabling System · CVSS 5.1 Medium · Not analysed yet · Published 19 Jul 2026 · Tags: Cross-site scripting (XSS), Code injection
- [SourceCodester Class and Exam Timetabling System forexam.php cross site scripting](https://agentprime.io/advisories/CVE-2026-16156.md)
  `CVE-2026-16156` · CVE record: SourceCodester Class and Exam Timetabling System · CVSS 5.1 Medium · Not analysed yet · Published 18 Jul 2026 · Tags: Cross-site scripting (XSS), Code injection
- [SourceCodester Class and Exam Timetabling System schoolyr.php cross site scripting](https://agentprime.io/advisories/CVE-2026-16155.md)
  `CVE-2026-16155` · CVE record: SourceCodester Class and Exam Timetabling System · CVSS 5.1 Medium · Not analysed yet · Published 18 Jul 2026 · Tags: Cross-site scripting (XSS), Code injection
- [CartoDB carto-api-client filters.ts addFilter prototype pollution](https://agentprime.io/advisories/CVE-2026-16151.md)
  `CVE-2026-16151` · CVE record: CartoDB carto-api-client · CVSS 5.3 Medium · Not analysed yet · Published 18 Jul 2026 · Tags: Code injection, Prototype pollution
- [RobinHerbots Inputmask Internal Deep Merge Helper extend.js extendAliases prototype pollution](https://agentprime.io/advisories/CVE-2026-16150.md)
  `CVE-2026-16150` · CVE record: RobinHerbots Inputmask · CVSS 5.3 Medium · Not analysed yet · Published 18 Jul 2026 · Tags: Code injection, Prototype pollution
- [uproot 5.7.4 and prior Code Injection via TStreamerInfo Metadata](https://agentprime.io/advisories/CVE-2026-9147.md)
  `CVE-2026-9147` · CVE record: scikit-hep uproot · CVSS 8.5 High · Not analysed yet · Published 18 Jul 2026 · Tags: Code injection
- [VMware Avi Load Balancer Remote Code Execution Vulnerability](https://agentprime.io/advisories/CVE-2026-47869.md)
  `CVE-2026-47869` · CVE record: VMware Avi Load Balancer · CVSS 8.7 High · Not analysed yet · Published 18 Jul 2026 · Tags: Code injection
- [VMware Avi Load Balancer Remote Code Execution Vulnerability](https://agentprime.io/advisories/CVE-2026-47867.md)
  `CVE-2026-47867` · CVE record: VMware Avi Load Balancer · CVSS 8.7 High · Not analysed yet · Published 18 Jul 2026 · Tags: Code injection
- [Prompty: Arbitrary code execution via JavaScript frontmatter in TypeScript loader](https://agentprime.io/advisories/GHSA-c4gh-rv8h-q9vw.md)
  `GHSA-c4gh-rv8h-q9vw`, `CVE-2026-53597` · npm `@prompty/core`: affected `>=2.0.0-alpha.1, <2.0.0-beta.3`, fixed in `2.0.0-beta.3` · CVSS 8.7 High · Not analysed yet · Published 17 Jul 2026 · Tags: Code injection
- [Parameter Injection Vulnerability in API Graph Execution Engine](https://agentprime.io/advisories/CVE-2026-8056.md)
  `CVE-2026-8056` · CVE record: IBM Langflow OSS · CVSS 8.8 High · Not analysed yet · Published 17 Jul 2026 · Tags: Code injection
- [Remote Code Execution via Code Validation Endpoint](https://agentprime.io/advisories/CVE-2026-8481.md)
  `CVE-2026-8481` · CVE record: IBM Langflow OSS · CVSS 9.9 Critical · Critical (CVSS 9+) · Not analysed yet · Published 17 Jul 2026 · Tags: Code injection
- [Arbitrary Code Execution in Python Interpreter Component](https://agentprime.io/advisories/CVE-2026-8635.md)
  `CVE-2026-8635` · CVE record: IBM Langflow OSS · CVSS 9.9 Critical · Critical (CVSS 9+) · Not analysed yet · Published 17 Jul 2026 · Tags: Code injection
- [Policies Component Dynamic CodeInput Fields Bypass Custom Component Validation](https://agentprime.io/advisories/CVE-2026-9135.md)
  `CVE-2026-9135` · CVE record: IBM Langflow OSS · CVSS 9.9 Critical · Critical (CVSS 9+) · Not analysed yet · Published 17 Jul 2026 · Tags: Code injection
- [AstrBotDevs AstrBot T2I Feature base.py NetworkRenderStrategy.render cross site scripting](https://agentprime.io/advisories/CVE-2026-16073.md)
  `CVE-2026-16073` · CVE record: AstrBotDevs AstrBot · CVSS 5.1 Medium · Not analysed yet · Published 17 Jul 2026 · Tags: Cross-site scripting (XSS), Code injection
- [Unauthenticated Remote Code Execution via Auto-Login Bypass and Code Validation](https://agentprime.io/advisories/CVE-2026-9198.md)
  `CVE-2026-9198` · CVE record: IBM Langflow OSS · CVSS 9.8 Critical · Critical (KEV, CVSS 9+, CVSS 7+ and EPSS) · In CISA KEV · EPSS 0.29 · Not analysed yet · Published 17 Jul 2026 · Tags: Code injection
- [IBM® Data Server driver for JDBC and SQLJ is vulnerable to remote code execution when jdbc url is under user control](https://agentprime.io/advisories/CVE-2026-9762.md)
  `CVE-2026-9762` · CVE record: IBM Db2 · CVSS 7.8 High · Not analysed yet · Published 17 Jul 2026 · Tags: Code injection
- [sagold json-schema-library propertyDependencies.ts parsePropertyDependencies prototype pollution](https://agentprime.io/advisories/CVE-2026-16008.md)
  `CVE-2026-16008` · CVE record: sagold json-schema-library · CVSS 5.3 Medium · Not analysed yet · Published 17 Jul 2026 · Tags: Code injection, Prototype pollution
- [An issue in Generic OEM UZ801_v2.1 4G LTE Router V3.4.3 allows a remote attacker to execute arbitrary code via the sbin/adbd component](https://agentprime.io/advisories/CVE-2026-52199.md)
  `CVE-2026-52199` · CVE record · CVSS 9.1 Critical · Critical (CVSS 9+) · Not analysed yet · Published 17 Jul 2026 · Tags: Command injection, Code injection
- [ArcadeDB: Trigger scripts run with java.lang.\* allowed, enabling OS command execution (RCE)](https://agentprime.io/advisories/GHSA-x9f9-r4m8-9xc2.md)
  `GHSA-x9f9-r4m8-9xc2`, `CVE-2026-67340` · Maven `com.arcadedb:arcadedb-engine`: affected `<26.7.2`, fixed in `26.7.2` · CVSS 8.6 High · Not analysed yet · Published 16 Jul 2026 · Tags: Command injection, Code injection
- [Nuclio: Unsanitized runtimeAttributes.repositories injected into Groovy build.gradle leads to build-time RCE](https://agentprime.io/advisories/GHSA-3v79-m2cg-89ww.md)
  `GHSA-3v79-m2cg-89ww`, `CVE-2026-52833`, `GO-2026-6004` · Go `github.com/nuclio/nuclio`: affected `<1.16.5`, fixed in `1.16.5` · CVSS 8.0 High · Not analysed yet · Published 16 Jul 2026 · Tags: Code injection
- [Frogman: Dialplan template parameters interpolated into extensions_custom.conf without escaping](https://agentprime.io/advisories/CVE-2026-46512.md)
  `CVE-2026-46512` · CVE record: mwtcmi frogman · CVSS 9.9 Critical · Critical (CVSS 9+) · Not analysed yet · Published 16 Jul 2026 · Tags: Code injection
- [django-haystack: Remote Code Execution via \`eval()\` in Elasticsearch Result Deserialization](https://agentprime.io/advisories/GHSA-r3hx-x5rh-p9vv.md)
  `GHSA-r3hx-x5rh-p9vv`, `CVE-2026-105315` · PyPI `django-haystack`: affected `<3.4.0`, fixed in `3.4.0` · CVSS 5.1 Medium · Not analysed yet · Published 15 Jul 2026 · Tags: Code injection
- [MaaAssistantArknights: PR-title expression injection in release-preparation.yml](https://agentprime.io/advisories/CVE-2026-55576.md)
  `CVE-2026-55576` · CVE record: MaaAssistantArknights MaaAssistantArknights · CVSS 8.8 High · Not analysed yet · Published 15 Jul 2026 · Tags: Command injection, Code injection
- [DataEase: RCE Vulnerability](https://agentprime.io/advisories/CVE-2026-45534.md)
  `CVE-2026-45534` · CVE record: dataease dataease · CVSS 9.0 Critical · Critical (CVSS 9+) · Not analysed yet · Published 15 Jul 2026 · Tags: Code injection
- [TDengine: UDF lead to RCE](https://agentprime.io/advisories/CVE-2026-62350.md)
  `CVE-2026-62350` · CVE record: taosdata TDengine · CVSS 7.2 High · Not analysed yet · Published 15 Jul 2026 · Tags: Code injection
- [PyTorch Lightning allows arbitrary code execution through checkpoint \_instantiator hyperparameters](https://agentprime.io/advisories/GHSA-qqmf-gpg7-g8gw.md)
  `GHSA-qqmf-gpg7-g8gw`, `CVE-2026-58659`, `PYSEC-2026-3624`, `PYSEC-2026-3967` · PyPI `lightning`: affected `<2.6.6`, fixed in `2.6.6` · CVSS 8.4 High · Not analysed yet · Published 15 Jul 2026 · Tags: Code injection
- [MantisBT: Remote Code Execution via eval() Class Hoisting in adm_config_set.php](https://agentprime.io/advisories/GHSA-v84x-qvhg-f36r.md)
  `GHSA-v84x-qvhg-f36r`, `CVE-2026-49273`, `PKSA-5jjt-2py9-5v67` · Packagist `mantisbt/mantisbt`: affected `>=1.3.0, <2.28.4`, fixed in `2.28.4` · CVSS 4.0, no score published · Not analysed yet · Published 15 Jul 2026 · Tags: Code injection
- [ERPNext: Server-Side Template Injection (SSTI) in Batch autonaming via Stock Settings.naming_series_prefix](https://agentprime.io/advisories/CVE-2026-55242.md)
  `CVE-2026-55242` · CVE record: frappe erpnext · CVSS 8.8 High · Not analysed yet · Published 15 Jul 2026 · Tags: Broken access control, Code injection
- [Duplicate Advisory: PraisonAI: Plugin Auto-Discovery Executes Arbitrary Python Files Without Verification](https://agentprime.io/advisories/GHSA-q359-rmv4-56fg.md)
  `GHSA-q359-rmv4-56fg` · PyPI `praisonaiagents`: affected `<=1.6.77`, no fixed version yet · CVSS 8.4 High · Withdrawn · Not analysed yet · Published 15 Jul 2026 · Tags: Code injection
- [Duplicate Advisory: PraisonAI: API deploy code generator embeds unescaped YAML fields into Python source](https://agentprime.io/advisories/GHSA-qpq9-hwx9-cwgc.md)
  `GHSA-qpq9-hwx9-cwgc` · PyPI `praisonai`: affected `<=4.6.77`, no fixed version yet · CVSS 7.8 High · Withdrawn · Not analysed yet · Published 15 Jul 2026 · Tags: Code injection
- [Grav Flex Objects - Server-Side Template Injection via Dynamic Titles](https://agentprime.io/advisories/CVE-2026-58655.md)
  `CVE-2026-58655` · CVE record: getgrav grav · CVSS 8.7 High · Not analysed yet · Published 15 Jul 2026 · Tags: Code injection
- [xszyou Fay 4.3.1 contains a remote code execution vulnerability in its MCP STDIO server management and command execution handling.](https://agentprime.io/advisories/CVE-2026-30618.md)
  `CVE-2026-30618` · CVE record · CVSS 9.8 Critical · Critical (CVSS 9+) · Not analysed yet · Published 15 Jul 2026 · Tags: Code injection
- [jadx: RCE Via Groovy Code Injection in Gradle Export](https://agentprime.io/advisories/CVE-2026-42049.md)
  `CVE-2026-42049` · CVE record: skylot jadx · CVSS 8.4 High · Not analysed yet · Published 14 Jul 2026 · Tags: Code injection
- [ColdFusion | Improper Control of Generation of Code ('Code Injection') (CWE-94)](https://agentprime.io/advisories/CVE-2026-48322.md)
  `CVE-2026-48322` · CVE record: Adobe ColdFusion 2025 and 1 more · CVSS 9.9 Critical · Critical (CVSS 9+) · Not analysed yet · Published 14 Jul 2026 · Tags: Code injection
- [TidGi Desktop Remote Code Execution via Malicious TiddlyWiki Repository Import — Tiddler Startup Module Auto-Execution](https://agentprime.io/advisories/GHSA-9hc2-hjx8-q6pv.md)
  `GHSA-9hc2-hjx8-q6pv`, `CVE-2026-14722` · npm `tidgi`: affected `<=0.13.0`, no fixed version yet · CVSS 6.9 Medium · Not analysed yet · Published 14 Jul 2026 · Tags: Other injection, Code injection
- [Code injection in SonicWall SMA1000](https://agentprime.io/advisories/CVE-2026-15410.md)
  `CVE-2026-15410` · CVE record: SonicWall SMA1000 · CVSS 7.2 High · Critical (KEV, CVSS 7+ and EPSS) · In CISA KEV, ransomware · EPSS 0.12 · Not analysed yet · Published 14 Jul 2026 · Tags: Code injection
- [SourceCodester Class and Exam Timetabling System exam.php cross site scripting](https://agentprime.io/advisories/CVE-2026-15715.md)
  `CVE-2026-15715` · CVE record: SourceCodester Class and Exam Timetabling System · CVSS 5.3 Medium · Not analysed yet · Published 14 Jul 2026 · Tags: Cross-site scripting (XSS), Code injection
- [Windows Admin Center Information Disclosure Vulnerability](https://agentprime.io/advisories/CVE-2026-56185.md)
  `CVE-2026-56185` · CVE record: Microsoft Windows Admin Center · CVSS 6.5 Medium · Not analysed yet · Published 14 Jul 2026 · Tags: Code injection, Authentication bypass
- [tamagui config.ts updateConfig prototype pollution](https://agentprime.io/advisories/CVE-2026-15702.md)
  `CVE-2026-15702` · CVE record: tamagui · CVSS 5.3 Medium · Not analysed yet · Published 14 Jul 2026 · Tags: Code injection, Prototype pollution
- [spencermountain compromise Public Root API extend.js nlp.extend prototype pollution](https://agentprime.io/advisories/CVE-2026-15699.md)
  `CVE-2026-15699` · CVE record: spencermountain compromise · CVSS 5.3 Medium · Not analysed yet · Published 14 Jul 2026 · Tags: Code injection, Prototype pollution
- [kofrasa mingo Update API updateMany prototype pollution](https://agentprime.io/advisories/CVE-2026-15698.md)
  `CVE-2026-15698` · CVE record: kofrasa mingo · CVSS 5.3 Medium · Not analysed yet · Published 14 Jul 2026 · Tags: Code injection, Prototype pollution
- [svgdotjs svg.js npm Package API EventTarget.on prototype pollution](https://agentprime.io/advisories/CVE-2026-15697.md)
  `CVE-2026-15697` · CVE record: svgdotjs svg.js · CVSS 5.3 Medium · Not analysed yet · Published 14 Jul 2026 · Tags: Code injection, Prototype pollution
- [code-projects Online Job Portal DetailJob.php cross site scripting](https://agentprime.io/advisories/CVE-2026-15678.md)
  `CVE-2026-15678` · CVE record: code-projects Online Job Portal · CVSS 5.1 Medium · Not analysed yet · Published 14 Jul 2026 · Tags: Cross-site scripting (XSS), Code injection
- [An issue in Aetopia Digital Asset Management DAM v.1.0.0 allows a remote attacker to execute arbitrary code via the name and description parameter of the Add/Update Project function](https://agentprime.io/advisories/CVE-2026-38450.md)
  `CVE-2026-38450` · CVE record · CVSS 9.8 Critical · Critical (CVSS 9+) · Not analysed yet · Published 14 Jul 2026 · Tags: Code injection
- [tanstack db Alias Path select.ts select prototype pollution](https://agentprime.io/advisories/CVE-2026-15607.md)
  `CVE-2026-15607` · CVE record: tanstack db · CVSS 5.3 Medium · Not analysed yet · Published 13 Jul 2026 · Tags: Code injection, Prototype pollution
- [antv layout object.js setNestedValue prototype pollution](https://agentprime.io/advisories/CVE-2026-15598.md)
  `CVE-2026-15598` · CVE record: antv layout · CVSS 5.3 Medium · Not analysed yet · Published 13 Jul 2026 · Tags: Code injection, Prototype pollution
- [SourceCodester Class and Exam Timetabling System subject.php cross site scripting](https://agentprime.io/advisories/CVE-2026-15596.md)
  `CVE-2026-15596` · CVE record: SourceCodester Class and Exam Timetabling System · CVSS 5.3 Medium · Not analysed yet · Published 13 Jul 2026 · Tags: Cross-site scripting (XSS), Code injection
- [SourceCodester Class and Exam Timetabling System forsubject.php cross site scripting](https://agentprime.io/advisories/CVE-2026-15595.md)
  `CVE-2026-15595` · CVE record: SourceCodester Class and Exam Timetabling System · CVSS 5.3 Medium · Not analysed yet · Published 13 Jul 2026 · Tags: Cross-site scripting (XSS), Code injection
- [DIRAC is vulnerable to RCE in FileCatalog DatasetManager via SQL injection + eval](https://agentprime.io/advisories/GHSA-m4m7-4cw8-62j6.md)
  `GHSA-m4m7-4cw8-62j6`, `CVE-2026-61667`, `PYSEC-2026-3463` · PyPI `dirac`: affected `>=6, <8.0.79 || >=8.1.0a1, <9.0.22 || >=9.1.0, <9.1.10`, fixed in `8.0.79`, `9.0.22`, `9.1.10` · CVSS 9.9 Critical · Critical (CVSS 9+) · Not analysed yet · Published 13 Jul 2026 · Tags: SQL injection, Code injection
- [Sandbox Escape in ServiceNow AI Platform](https://agentprime.io/advisories/CVE-2026-6875.md)
  `CVE-2026-6875` · CVE record: ServiceNow ServiceNow AI Platform · CVSS 9.5 Critical · Critical (CVSS 9+) · Not analysed yet · Published 13 Jul 2026 · Tags: Code injection
- [DIRAC is vulnerable to RCE in RequestManager due to eval on untrusted input](https://agentprime.io/advisories/GHSA-9jpv-c7p4-997x.md)
  `GHSA-9jpv-c7p4-997x`, `CVE-2026-45579`, `PYSEC-2026-3462` · PyPI `dirac`: affected `>=6, <8.0.79 || >=8.1.0a1, <9.0.22 || >=9.1.0, <9.1.10`, fixed in `8.0.79`, `9.0.22`, `9.1.10` · CVSS 9.9 Critical · Critical (CVSS 9+) · Not analysed yet · Published 13 Jul 2026 · Tags: Code injection
- [Decidim: HTML content blocks allow stored script execution](https://agentprime.io/advisories/GHSA-533c-2vh9-4r86.md)
  `GHSA-533c-2vh9-4r86`, `CVE-2026-45572` · RubyGems `decidim-core`: affected `<0.30.9 || >=0.31.0.rc1, <0.31.5 || >=0.32.0.rc1, <0.32.0`, fixed in `0.30.9`, `0.31.5`, `0.32.0` · CVSS 4.8 Medium · Not analysed yet · Published 13 Jul 2026 · Tags: Code injection
- [Remote code execution in Mura Software’s CMS](https://agentprime.io/advisories/CVE-2026-12257.md)
  `CVE-2026-12257` · CVE record: Mura Software CMS · CVSS 9.3 Critical · Critical (CVSS 9+) · Not analysed yet · Published 13 Jul 2026 · Tags: Code injection
- [Remote Code Execution vulnerability in "Suspicious" application](https://agentprime.io/advisories/CVE-2026-13014.md)
  `CVE-2026-13014` · CVE record: Thales CERT Suspicious · CVSS 9.2 Critical · Critical (CVSS 9+) · Not analysed yet · Published 13 Jul 2026 · Tags: Path traversal, Code injection

Newest: <https://agentprime.io/advisories/tag/code-injection.md>
Older: <https://agentprime.io/advisories/tag/code-injection.md?cursor=WyIyMDI2LTA3LTEzVDA5OjQyOjQ1LjQzMTAwMFoiLCJDVkUtMjAyNi0xMzAxNCJd>

## Filters and formats

Filters are query parameters on this URL: `q` (words, as in a web search engine: `"a phrase"`, `OR`, `-word`; an id; a package or product name), `severity` (low, medium, high or critical), `critical=1`, `kev=1`, `ecosystem` (npm, pypi, packagist, go, maven, rubygems, crates, nuget, hex), `kind=package`, `assigner` (a CNA’s short name), `min_score` and `state`. Each record’s title links to its Markdown page.

- The same list as JSON: <https://api.agentprime.io/v1/advisories?tag=code-injection&cursor=WyIyMDI2LTA3LTIwVDAwOjAwOjAwLjAwMDAwMFoiLCJDVkUtMjAyNi01MTM4NSJd>
- Every list: <https://agentprime.io/advisories.md>, critical: <https://agentprime.io/advisories/critical.md>; by weakness: <https://agentprime.io/advisories/tag/sql-injection.md> and the other tags in <https://agentprime.io/llms.txt>; by technology: `/advisories/technology/<slug>.md` (`fortinet-fortimail`)

---

The web page: <https://agentprime.io/advisories/tag/code-injection/?cursor=WyIyMDI2LTA3LTIwVDAwOjAwOjAwLjAwMDAwMFoiLCJDVkUtMjAyNi01MTM4NSJd>. Everything for agents: <https://agentprime.io/llms.txt>.