# Code injection. Untrusted input evaluated as code: eval, templates, expression languages. Every Advisory and CVE whose weakness (CWE) is one of these, newest first. ## Records, newest first (an older page) - [Bolt CMS Server-Side Template Injection via Unsandboxed allow_twig Field Rendering](https://agentprime.io/advisories/CVE-2026-71291.md) `CVE-2026-71291` · CVE record: bolt core · CVSS 8.8 High · Not analysed yet · Published 5 Aug 2026 · Tags: Code injection - [ember-dynamic-render-template Client-Side Template Injection via Unsanitized templateString](https://agentprime.io/advisories/CVE-2026-71286.md) `CVE-2026-71286` · CVE record: miguelcobain ember-dynamic-render-template · CVSS 6.1 Medium · Not analysed yet · Published 5 Aug 2026 · Tags: Code injection - [rust-iot-platform Unauthenticated Remote Code Execution via Unsandboxed Calc-Rule Script Evaluation](https://agentprime.io/advisories/CVE-2026-71278.md) `CVE-2026-71278` · CVE record: iot-ecology rust-iot-platform · CVSS 9.8 Critical · Critical (CVSS 9+) · Not analysed yet · Published 5 Aug 2026 · Tags: Code injection - [Path traversal in Eclipse Foundation Eclipse Mojarra](https://agentprime.io/advisories/CVE-2026-46581.md) `CVE-2026-46581` · CVE record: Eclipse Foundation Eclipse Mojarra · CVSS 7.5 High · Not analysed yet · Published 5 Aug 2026 · Tags: Path traversal, Code injection, CWE-641 - [DjangoCRM - Server-Side Template Injection in Mass Mail Message Rendering](https://agentprime.io/advisories/CVE-2026-71239.md) `CVE-2026-71239` · CVE record: DjangoCRM django-crm · CVSS 8.1 High · Not analysed yet · Published 5 Aug 2026 · Tags: Code injection - [Magistrala IoT Platform - Unrestricted Go/Lua Script Execution in Rules Engine](https://agentprime.io/advisories/CVE-2026-71235.md) `CVE-2026-71235` · CVE record: absmach magistrala · CVSS 8.8 High · Not analysed yet · Published 5 Aug 2026 · Tags: Code injection - [MacCMS10 - Incomplete Function Blacklist in Template Editor Enables Authenticated RCE](https://agentprime.io/advisories/CVE-2026-71232.md) `CVE-2026-71232` · CVE record: magicblack maccms10 · CVSS 7.2 High · Not analysed yet · Published 5 Aug 2026 · Tags: Code injection - [ShopLentor <= 3.3.7 - Authenticated (Administrator+) Arbitrary Function Execution via 'callback' Parameter via REST API](https://agentprime.io/advisories/CVE-2026-6020.md) `CVE-2026-6020` · CVE record: devitemsllc ShopLentor – All-in-One WooCommerce Growth & Store Enhancement Plugin · CVSS 7.2 High · Not analysed yet · Published 5 Aug 2026 · Tags: Code injection - [MaxSite CMS Unauthenticated RCE via Install Endpoint](https://agentprime.io/advisories/CVE-2026-70553.md) `CVE-2026-70553` · CVE record: MaxSite MaxSite CMS · CVSS 9.3 Critical · Critical (CVSS 9+) · Not analysed yet · Published 4 Aug 2026 · Tags: Code injection - [Flowise: CSV Agent Prompt Injection Remote Code Execution Vulnerability](https://agentprime.io/advisories/GHSA-5xvg-pmgg-3mxr.md) `GHSA-5xvg-pmgg-3mxr`, `CVE-2026-70477` · npm `flowise` and 1 more: affected `<3.1.3`, fixed in `3.1.3` · CVSS 9.5 Critical · Critical (CVSS 9+) · Not analysed yet · Published 4 Aug 2026 · Tags: Code injection - [Flowise: RCE via CSVAgent csvFile data URI base64 segment is interpolated into Python source without validation](https://agentprime.io/advisories/GHSA-4j8x-x6v7-w9rq.md) `GHSA-4j8x-x6v7-w9rq`, `CVE-2026-69264` · npm `flowise` and 1 more: affected `<3.1.3`, fixed in `3.1.3` · CVSS 9.4 Critical · Critical (CVSS 9+) · Not analysed yet · Published 4 Aug 2026 · Tags: Code injection - [Flowise RCE via SQLite Record Manager Node](https://agentprime.io/advisories/GHSA-x3hf-7cj6-3r4m.md) `GHSA-x3hf-7cj6-3r4m`, `CVE-2026-69259` · npm `flowise` and 1 more: affected `<3.1.3`, fixed in `3.1.3` · CVSS 9.4 Critical · Critical (CVSS 9+) · Not analysed yet · Published 4 Aug 2026 · Tags: Code injection - [Code injection in Veeam ONE](https://agentprime.io/advisories/CVE-2026-58074.md) `CVE-2026-58074` · CVE record: Veeam ONE · CVSS 8.6 High · Not analysed yet · Published 4 Aug 2026 · Tags: Code injection - [Code injection in Veeam ONE](https://agentprime.io/advisories/CVE-2026-64633.md) `CVE-2026-64633` · CVE record: Veeam ONE · CVSS 10.0 Critical · Critical (CVSS 9+) · Not analysed yet · Published 4 Aug 2026 · Tags: Code injection - [Flowise: Remote Code Execution Vulnerability in CSVAgent](https://agentprime.io/advisories/GHSA-x6vm-w76m-8j7g.md) `GHSA-x6vm-w76m-8j7g`, `CVE-2026-69256` · npm `flowise` and 1 more: affected `<3.1.3`, fixed in `3.1.3` · CVSS 9.4 Critical · Critical (CVSS 9+) · Not analysed yet · Published 4 Aug 2026 · Tags: Code injection - [Flowise: CSV Agent Remote Code Execution via Pyodide Code Injection — Root Shell Verified](https://agentprime.io/advisories/GHSA-vmv7-4m6c-3cg5.md) `GHSA-vmv7-4m6c-3cg5`, `CVE-2026-69255` · npm `flowise` and 1 more: affected `<3.1.3`, fixed in `3.1.3` · CVSS 9.2 Critical · Critical (CVSS 9+) · Not analysed yet · Published 4 Aug 2026 · Tags: Code injection - [Flowise: RCE via NodeVM Sandbox Escape in executeJavaScriptCode() nodeVMOptions Override](https://agentprime.io/advisories/GHSA-3769-jgqc-cxm7.md) `GHSA-3769-jgqc-cxm7`, `CVE-2026-69254` · npm `flowise` and 1 more: affected `<3.1.3`, fixed in `3.1.3` · CVSS 9.4 Critical · Critical (CVSS 9+) · Not analysed yet · Published 4 Aug 2026 · Tags: Code injection - [LAMP 5.6.2 GlueFactory Unsandboxed Groovy Script Remote Code Execution](https://agentprime.io/advisories/CVE-2026-69100.md) `CVE-2026-69100` · CVE record: dromara lamp-cloud · CVSS 8.7 High · Not analysed yet · Published 4 Aug 2026 · Tags: Code injection - [Flowise Sandbox Escape to RCE](https://agentprime.io/advisories/GHSA-wg86-r78f-74mp.md) `GHSA-wg86-r78f-74mp`, `CVE-2026-69253` · npm `flowise` and 1 more: affected `<3.1.3`, fixed in `3.1.3` · CVSS 9.0 Critical · Critical (CVSS 9+) · Not analysed yet · Published 4 Aug 2026 · Tags: Code injection - [vibesurf-ai VibeSurf Python Validation code code injection](https://agentprime.io/advisories/CVE-2026-18770.md) `CVE-2026-18770` · CVE record: vibesurf-ai VibeSurf · CVSS 6.9 Medium · Not analysed yet · Published 4 Aug 2026 · Tags: Other injection, Code injection - [Flowise RCE via TypeORM DataSource](https://agentprime.io/advisories/GHSA-g32j-mmxr-gfq5.md) `GHSA-g32j-mmxr-gfq5`, `CVE-2026-69251` · npm `flowise` and 1 more: affected `<3.1.3`, fixed in `3.1.3` · CVSS 9.0 Critical · Critical (CVSS 9+) · Not analysed yet · Published 4 Aug 2026 · Tags: Code injection - [Perspective 5.0.0 RCE via eval() Expression Injection](https://agentprime.io/advisories/CVE-2026-67195.md) `CVE-2026-67195` · CVE record: perspective-dev perspective · CVSS 8.7 High · Not analysed yet · Published 4 Aug 2026 · Tags: Code injection - [Create Block Theme < 2.10.0 - Admin+ PHP Code Injection via Pattern Save (Multisite)](https://agentprime.io/advisories/CVE-2026-16623.md) `CVE-2026-16623` · CVE record: Unknown Create Block Theme · CVSS 8.0 High · Not analysed yet · Published 4 Aug 2026 · Tags: Code injection - [An issue in Vim Project v9.2.0389 and earlier allows a local attacker to execute arbitrary code via the vms_fixfilename() function within file vim/src/os_vms.c](https://agentprime.io/advisories/CVE-2026-51401.md) `CVE-2026-51401` · CVE record · CVSS 7.7 High · Not analysed yet · Published 4 Aug 2026 · Tags: Code injection - [Microsoft Edge (Chromium-based) Spoofing Vulnerability](https://agentprime.io/advisories/CVE-2026-65804.md) `CVE-2026-65804` · CVE record: Microsoft Microsoft Edge (Chromium-based) · CVSS 6.1 Medium · Not analysed yet · Published 3 Aug 2026 · Tags: Code injection - [Adobe Campaign Classic (ACC) | Improper Neutralization of Special Elements Used in a Template Engine (CWE-1336)](https://agentprime.io/advisories/CVE-2026-48323.md) `CVE-2026-48323` · CVE record: Adobe Adobe Campaign Classic · CVSS 10.0 Critical · Critical (CVSS 9+) · Not analysed yet · Published 3 Aug 2026 · Tags: Code injection - [Adobe Campaign Classic (ACC) | Improper Neutralization of Directives in Dynamically Evaluated Code ('Eval Injection') (CWE-95)](https://agentprime.io/advisories/CVE-2026-48317.md) `CVE-2026-48317` · CVE record: Adobe Adobe Campaign Classic · CVSS 9.6 Critical · Critical (CVSS 9+) · Not analysed yet · Published 3 Aug 2026 · Tags: Code injection - [Sensor Proxy Version 1.4.2 Fixes One Vulnerability](https://agentprime.io/advisories/CVE-2026-18667.md) `CVE-2026-18667` · CVE record: Tenable, Inc. Sensor Proxy · CVSS 9.3 Critical · Critical (CVSS 9+) · Not analysed yet · Published 3 Aug 2026 · Tags: Code injection - [OpenAkita File Upload API upload cross site scripting](https://agentprime.io/advisories/CVE-2026-18682.md) `CVE-2026-18682` · CVE record: OpenAkita · CVSS 2.3 Low · Not analysed yet · Published 3 Aug 2026 · Tags: Cross-site scripting (XSS), Code injection - [langgenius dify Jinja2 jinja2_transformer.py jinja2.Template special elements used in a template engine](https://agentprime.io/advisories/CVE-2026-18632.md) `CVE-2026-18632` · CVE record: langgenius dify · CVSS 5.3 Medium · Not analysed yet · Published 3 Aug 2026 · Tags: Code injection, CWE-791 - [WebsiteBaker CMS < 2.13.10 Code Injection via Droplets Editor](https://agentprime.io/advisories/CVE-2026-61523.md) `CVE-2026-61523` · CVE record: WebsiteBaker Org e.V. WebsiteBaker CMS · CVSS 8.6 High · Not analysed yet · Published 3 Aug 2026 · Tags: Code injection - [OpenEMR 8.2.0 Remote Code Execution via CategoryTree eval() Injection](https://agentprime.io/advisories/CVE-2026-39932.md) `CVE-2026-39932` · CVE record: openemr openemr · CVSS 9.4 Critical · Critical (CVSS 9+) · Not analysed yet · Published 3 Aug 2026 · Tags: Code injection - [Duplicate Advisory: Grav: Incomplete callable validation in blueprint dynamic fields allows arbitrary static method invocation and file disclosure](https://agentprime.io/advisories/GHSA-vj8j-973f-r65j.md) `GHSA-vj8j-973f-r65j` · Packagist `getgrav/grav`: affected `>=2.0.7, <=2.0.10`, no fixed version yet · CVSS 8.1 High · Withdrawn · Not analysed yet · Published 3 Aug 2026 · Tags: Code injection - [Kali Forms <= 2.4.20 - Unauthenticated Remote Code Execution via 'thisPermalink' Field Parameter](https://agentprime.io/advisories/CVE-2026-16144.md) `CVE-2026-16144` · CVE record: wpchill Kali Forms — Contact Form & Drag-and-Drop Builder · CVSS 8.1 High · Not analysed yet · Published 1 Aug 2026 · Tags: Code injection - [sentence-transformers local model loading bypasses trust_remote_code and executes custom Python](https://agentprime.io/advisories/GHSA-jhr6-gm9c-rqjv.md) `GHSA-jhr6-gm9c-rqjv`, `CVE-2026-68770`, `PYSEC-2026-4164` · PyPI `sentence-transformers`: affected `<5.6.0`, fixed in `5.6.0` · CVSS 9.3 Critical · Critical (CVSS 9+) · Not analysed yet · Published 31 Jul 2026 · Tags: Code injection - [Savon::Model evaluates WSDL operation names as Ruby source](https://agentprime.io/advisories/GHSA-mx5j-mp4f-g8jg.md) `GHSA-mx5j-mp4f-g8jg`, `CVE-2026-53510` · RubyGems `savon`: affected `>=0.9.8, <2.17.2`, fixed in `2.17.2` · CVSS 8.1 High · Not analysed yet · Published 31 Jul 2026 · Tags: Code injection - [@dynatrace-oss/dynatrace-mcp-server has a workflow template injection via create_workflow_for_notification](https://agentprime.io/advisories/GHSA-xrmj-5g4g-8987.md) `GHSA-xrmj-5g4g-8987`, `CVE-2026-123809` · npm `@dynatrace-oss/dynatrace-mcp-server`: affected `<2.0.0`, fixed in `2.0.0` · CVSS 4.2 Medium · Not analysed yet · Published 31 Jul 2026 · Tags: Code injection - [Unauthenticated RCE in Innotim Software's Logsign SIEM](https://agentprime.io/advisories/CVE-2026-17561.md) `CVE-2026-17561` · CVE record: Innotim Software, Telecommunications and Consulting Trade Ltd. Co. Logsign SIEM · CVSS 9.8 Critical · Critical (CVSS 9+) · Not analysed yet · Published 31 Jul 2026 · Tags: Code injection - [ElementsKit Lite < 3.10.01 - Subsite Administrator+ PHP Code Injection via Custom Widget Builder (Multisite)](https://agentprime.io/advisories/CVE-2026-13392.md) `CVE-2026-13392` · CVE record: Unknown ElementsKit Elementor Addons · CVSS 7.2 High · Not analysed yet · Published 31 Jul 2026 · Tags: Code injection - [An issue in Hugo Leisink Hiawatha v.12.1 and before allows a remote attacker to execute arbitrary code via a crafted request](https://agentprime.io/advisories/CVE-2026-51785.md) `CVE-2026-51785` · CVE record · CVSS 9.8 Critical · Critical (CVSS 9+) · Not analysed yet · Published 31 Jul 2026 · Tags: Code injection - [AWS Amplify Studio UI Component Properties Has an Input Validation Issue](https://agentprime.io/advisories/GHSA-hf3j-86p7-mfw8.md) `GHSA-hf3j-86p7-mfw8`, `CVE-2025-4318` · npm `@aws-amplify/codegen-ui-react`: affected `<2.20.3`, fixed in `2.20.3` · CVSS 9.0 Critical · Critical (CVSS 9+) · Not analysed yet · Published 30 Jul 2026 · Tags: Code injection - [Remote Code Execution in CUGA Component CodeAgent](https://agentprime.io/advisories/CVE-2026-12946.md) `CVE-2026-12946` · CVE record: IBM Langflow OSS · CVSS 9.9 Critical · Critical (CVSS 9+) · Not analysed yet · Published 30 Jul 2026 · Tags: Code injection - [Incomplete fix for CVE-2025-4318 code injection in Amazon @aws-amplify/codegen-ui-react](https://agentprime.io/advisories/CVE-2026-18245.md) `CVE-2026-18245` · CVE record: AWS Amplify Codegen UI · CVSS 6.4 Medium · Not analysed yet · Published 30 Jul 2026 · Tags: Code injection - [CVE-2026-15971](https://agentprime.io/advisories/CVE-2026-15971.md) `CVE-2026-15971` · CVE record: SGLang SGLang · CVSS 9.8 Critical · Critical (CVSS 9+) · Not analysed yet · Published 30 Jul 2026 · Tags: Code injection - [Python Interpreter Sandbox Bypass Leading to Sensitive Data Exposure](https://agentprime.io/advisories/CVE-2026-13435.md) `CVE-2026-13435` · CVE record: IBM Langflow OSS · CVSS 9.9 Critical · Critical (CVSS 9+) · Not analysed yet · Published 30 Jul 2026 · Tags: Code injection - [Remote API <= 0.2 - Unauthenticated PHP Object Injection via remote-api Query Parameter](https://agentprime.io/advisories/CVE-2026-14602.md) `CVE-2026-14602` · CVE record: Unknown Remote API · CVSS 9.0 Critical · Critical (CVSS 9+) · Not analysed yet · Published 30 Jul 2026 · Tags: Code injection - [Code injection in Google Chrome](https://agentprime.io/advisories/CVE-2026-17922.md) `CVE-2026-17922` · CVE record: Google Chrome · CVSS 8.8 High · Not analysed yet · Published 30 Jul 2026 · Tags: Code injection - [AgentCore CLI Bedrock Agent Import Vulnerable to Code Injection via Improper Triple-Quote Escaping](https://agentprime.io/advisories/GHSA-m4x6-gwgp-4pm7.md) `GHSA-m4x6-gwgp-4pm7`, `CVE-2026-11393` · npm `@aws/agentcore`: affected `>=0.3.0-preview.7.0, <=0.3.0-preview.9.0 || >=0.4.0, <0.14.2 || >=1.0.0-preview.1, <1.0.0-preview.9`, fixed in `0.14.2`, `1.0.0-preview.9` · CVSS 8.8 High · Not analysed yet · Published 29 Jul 2026 · Tags: Code injection - [swagger-typescript-api vulnerable to code injection via unescaped OpenAPI path strings in generated method bodies](https://agentprime.io/advisories/GHSA-w284-33mx-6g9v.md) `GHSA-w284-33mx-6g9v`, `CVE-2026-54666` · npm `swagger-typescript-api`: affected `<13.12.2`, fixed in `13.12.2` · CVSS 8.3 High · Not analysed yet · Published 29 Jul 2026 · Tags: Other injection, Code injection - [swagger-typescript-api vulnerable to code injection via unescaped enum string values](https://agentprime.io/advisories/GHSA-5f94-x226-ccpm.md) `GHSA-5f94-x226-ccpm`, `CVE-2026-54664` · npm `swagger-typescript-api`: affected `<13.12.2`, fixed in `13.12.2` · CVSS 8.3 High · Not analysed yet · Published 29 Jul 2026 · Tags: Other injection, Code injection - [swagger-typescript-api vulnerable to code injection via unescaped \`servers\[0\].url\` in axios http-client template](https://agentprime.io/advisories/GHSA-38c3-wv3c-v3xj.md) `GHSA-38c3-wv3c-v3xj`, `CVE-2026-54661` · npm `swagger-typescript-api`: affected `<13.12.2`, fixed in `13.12.2` · CVSS 8.3 High · Not analysed yet · Published 29 Jul 2026 · Tags: Other injection, Code injection - [swagger-typescript-api vulnerable to code injection via unescaped \`servers\[0\].url\` in fetch http-client template](https://agentprime.io/advisories/GHSA-hqj5-cw9f-rx67.md) `GHSA-hqj5-cw9f-rx67`, `CVE-2026-54662` · npm `swagger-typescript-api`: affected `<13.12.2`, fixed in `13.12.2` · CVSS 8.3 High · Not analysed yet · Published 29 Jul 2026 · Tags: Other injection, Code injection - [Server-Side Template Injection in SecureTransport's Apache Velocity mail templates](https://agentprime.io/advisories/CVE-2026-9177.md) `CVE-2026-9177` · CVE record: Axway SecureTransport · CVSS 9.4 Critical · Critical (CVSS 9+) · Not analysed yet · Published 29 Jul 2026 · Tags: Code injection - [Cost Calculator Builder PRO <= 4.0.3 - Unauthenticated Remote Code Execution via 'orderDetails' Parameter](https://agentprime.io/advisories/CVE-2026-14900.md) `CVE-2026-14900` · CVE record: StylemixThemes Cost Calculator Builder PRO · CVSS 9.8 Critical · Critical (CVSS 9+) · Not analysed yet · Published 29 Jul 2026 · Tags: Code injection - [Streamit < 4.5.2 - Unauthenticated Remote Code Execution via Arbitrary Function Call](https://agentprime.io/advisories/CVE-2026-13423.md) `CVE-2026-13423` · CVE record: Unknown Streamit · CVSS 9.8 Critical · Critical (CVSS 9+) · Not analysed yet · Published 29 Jul 2026 · Tags: Code injection - [\`datamodel-code-generator\` vulnerable to code injection via unescaped carriage return in \`--extra-template-data\` \`comment\` field](https://agentprime.io/advisories/GHSA-wjv6-jcfj-mf9r.md) `GHSA-wjv6-jcfj-mf9r`, `CVE-2026-54654`, `PYSEC-2026-3566` · PyPI `datamodel-code-generator`: affected `>=0.14.1, <0.60.2`, fixed in `0.60.2` · CVSS 7.8 High · Not analysed yet · Published 28 Jul 2026 · Tags: Code injection - [\`datamodel-code-generator\` vulnerable to code injection in via attacker-controlled \`default_factory\` schema field](https://agentprime.io/advisories/GHSA-386q-5hp3-95m9.md) `GHSA-386q-5hp3-95m9`, `CVE-2026-54653`, `PYSEC-2026-3555` · PyPI `datamodel-code-generator`: affected `>=0.17.0, <0.60.2`, fixed in `0.60.2` · CVSS 8.8 High · Not analysed yet · Published 28 Jul 2026 · Tags: Code injection - [\`datamodel-code-generator\` vulnerable to code execution on import via unescaped \`validators\` entries in --extra-template-data](https://agentprime.io/advisories/GHSA-8m8r-38jm-f355.md) `GHSA-8m8r-38jm-f355`, `CVE-2026-54656`, `PYSEC-2026-3559` · PyPI `datamodel-code-generator`: affected `>=0.52.1, <0.60.2`, fixed in `0.60.2` · CVSS 7.8 High · Not analysed yet · Published 28 Jul 2026 · Tags: Code injection - [datamodel-code-generator vulnerable to code injection via \`x-python-import\` / \`customTypePath\` in generated import statements](https://agentprime.io/advisories/GHSA-5578-w22f-pfx9.md) `GHSA-5578-w22f-pfx9`, `CVE-2026-55415`, `PYSEC-2026-3557` · PyPI `datamodel-code-generator`: affected `>=0.11.6, <0.64.0`, fixed in `0.64.0` · CVSS 7.5 High · Not analysed yet · Published 28 Jul 2026 · Tags: Code injection - [\`datamodel-code-generator\` vulnerable to code injection via unescaped carriage return in GraphQL Union description](https://agentprime.io/advisories/GHSA-j884-q54q-mmx3.md) `GHSA-j884-q54q-mmx3`, `CVE-2026-54621`, `PYSEC-2026-3561` · PyPI `datamodel-code-generator`: affected `>=0.25.0, <0.60.1`, fixed in `0.60.1` · CVSS 7.8 High · Not analysed yet · Published 28 Jul 2026 · Tags: Code injection Newest: Older: ## Filters and formats Filters are query parameters on this URL: `q` (words, as in a web search engine: `"a phrase"`, `OR`, `-word`; an id; a package or product name), `severity` (low, medium, high or critical), `critical=1`, `kev=1`, `ecosystem` (npm, pypi, packagist, go, maven, rubygems, crates, nuget, hex), `kind=package`, `assigner` (a CNA’s short name), `min_score` and `state`. Each record’s title links to its Markdown page. - The same list as JSON: - Every list: , critical: ; by weakness: and the other tags in ; by technology: `/advisories/technology/.md` (`fortinet-fortimail`) --- The web page: . Everything for agents: .