# Code injection. Untrusted input evaluated as code: eval, templates, expression languages. Every Advisory and CVE whose weakness (CWE) is one of these, newest first. ## Records, newest first (an older page) - [calibre: Bypass of Python template restrictions via nested \`template()\` leading to RCE](https://agentprime.io/advisories/CVE-2026-73248.md) `CVE-2026-73248` · CVE record: kovidgoyal calibre · CVSS 8.5 High · Not analysed yet · Published 11 Aug 2026 · Tags: Code injection - [Code injection in SonicWall Email Security](https://agentprime.io/advisories/CVE-2026-66150.md) `CVE-2026-66150` · CVE record: SonicWall Email Security · CVSS 7.8 High · Not analysed yet · Published 11 Aug 2026 · Tags: Code injection - [Code injection in SonicWall Email Security](https://agentprime.io/advisories/CVE-2026-66149.md) `CVE-2026-66149` · CVE record: SonicWall Email Security · CVSS 7.8 High · Not analysed yet · Published 11 Aug 2026 · Tags: Code injection - [Code injection in SonicWall GMS](https://agentprime.io/advisories/CVE-2026-66148.md) `CVE-2026-66148` · CVE record: SonicWall GMS · CVSS 6.3 Medium · Not analysed yet · Published 11 Aug 2026 · Tags: Code injection - [Code injection in SonicWall GMS](https://agentprime.io/advisories/CVE-2026-66147.md) `CVE-2026-66147` · CVE record: SonicWall GMS · CVSS 9.4 Critical · Critical (CVSS 9+) · Not analysed yet · Published 11 Aug 2026 · Tags: Code injection - [Code injection in SonicWall GMS](https://agentprime.io/advisories/CVE-2026-66145.md) `CVE-2026-66145` · CVE record: SonicWall GMS · CVSS 9.1 Critical · Critical (CVSS 9+) · Not analysed yet · Published 11 Aug 2026 · Tags: Code injection - [FreeCAD: FEM formula incomplete escape](https://agentprime.io/advisories/CVE-2026-73233.md) `CVE-2026-73233` · CVE record: FreeCAD FreeCAD · CVSS 8.5 High · Not analysed yet · Published 11 Aug 2026 · Tags: Code injection - [PapersGPT for Zotero 0.6.1 RCE via Unsanitized LLM Response eval()](https://agentprime.io/advisories/CVE-2026-73032.md) `CVE-2026-73032` · CVE record: papersgpt papersgpt-for-zotero · CVSS 9.4 Critical · Critical (CVSS 9+) · Not analysed yet · Published 11 Aug 2026 · Tags: Code injection - [Improper Neutralization of Input in MongoDB Server's JavaScript Scripting Engine Leads to Unauthorized Code Execution Within Query Scopes](https://agentprime.io/advisories/CVE-2026-18708.md) `CVE-2026-18708` · CVE record: MongoDB MongoDB Server · CVSS 5.3 Medium · Not analysed yet · Published 11 Aug 2026 · Tags: Code injection - [Microsoft PowerShell Security Feature Bypass Vulnerability](https://agentprime.io/advisories/CVE-2026-70338.md) `CVE-2026-70338` · CVE record: Microsoft PowerShell 7.4 and 2 more · CVSS 7.8 High · Not analysed yet · Published 11 Aug 2026 · Tags: Code injection - [Visual Studio Code Remote Code Execution Vulnerability](https://agentprime.io/advisories/CVE-2026-70336.md) `CVE-2026-70336` · CVE record: Microsoft Visual Studio Code · CVSS 8.8 High · Not analysed yet · Published 11 Aug 2026 · Tags: Code injection - [Microsoft SharePoint Server Remote Code Execution Vulnerability](https://agentprime.io/advisories/CVE-2026-65660.md) `CVE-2026-65660` · CVE record: Microsoft Microsoft SharePoint Enterprise Server 2016 and 2 more · CVSS 8.8 High · Critical (KEV) · In CISA KEV · Not analysed yet · Published 11 Aug 2026 · Tags: Code injection - [Activepieces: Reflected Cross-Site Scripting in OAuth Redirect Endpoint](https://agentprime.io/advisories/CVE-2026-73084.md) `CVE-2026-73084` · CVE record: activepieces activepieces · CVSS 6.1 Medium · Not analysed yet · Published 11 Aug 2026 · Tags: Cross-site scripting (XSS), Code injection - [Vim: Arbitrary Command Execution via Malicious \`.VimballRecord\` Entry Replay in \`vimball.vim\`](https://agentprime.io/advisories/CVE-2026-73076.md) `CVE-2026-73076` · CVE record: vim vim · CVSS 8.4 High · Not analysed yet · Published 11 Aug 2026 · Tags: Code injection, CWE-829 - [Fooocus webui vulnerable to Remote Code Execution](https://agentprime.io/advisories/CVE-2025-31114.md) `CVE-2025-31114` · CVE record: lllyasviel Fooocus · CVSS 9.3 Critical · Critical (CVSS 9+) · Not analysed yet · Published 11 Aug 2026 · Tags: Code injection - [Dbi: incomplete fix for cve-2026-14380 dbi: arbitrary code execution via caller-influenced profile attribute](https://agentprime.io/advisories/CVE-2026-19546.md) `CVE-2026-19546` · CVE record: Red Hat Red Hat Enterprise Linux 10 and 4 more · CVSS 8.8 High · Not analysed yet · Published 11 Aug 2026 · Tags: Code injection - [Improper Authorization in SAP Commerce Cloud (Data Hub Adapter)](https://agentprime.io/advisories/CVE-2026-58231.md) `CVE-2026-58231` · CVE record: SAP_SE SAP Commerce Cloud (Data Hub Adapter) · CVSS 10.0 Critical · Critical (CVSS 9+) · Not analysed yet · Published 11 Aug 2026 · Tags: Code injection - [Code Injection vulnerability in Manufacturing Integration and Intelligence](https://agentprime.io/advisories/CVE-2026-44758.md) `CVE-2026-44758` · CVE record: SAP_SE SAP Manufacturing Integration and Intelligence · CVSS 9.1 Critical · Critical (CVSS 9+) · Not analysed yet · Published 11 Aug 2026 · Tags: Code injection - [ERPNext: Possibility of server-side template injection due to missing validation](https://agentprime.io/advisories/CVE-2026-72911.md) `CVE-2026-72911` · CVE record: frappe erpnext · CVSS 9.9 Critical · Critical (CVSS 9+) · Not analysed yet · Published 10 Aug 2026 · Tags: Code injection - [Feast-operator: feast: feast apply cronjob runs user python with feature-server sa — tenant code to sa token escalation](https://agentprime.io/advisories/CVE-2026-18942.md) `CVE-2026-18942` · CVE record: Red Hat Red Hat OpenShift AI 2.25 and 2 more · CVSS 5.5 Medium · Not analysed yet · Published 10 Aug 2026 · Tags: Code injection, Privilege escalation - [Firecrawl: Arbitrary file read via JSON Schema $ref expansion](https://agentprime.io/advisories/CVE-2026-72904.md) `CVE-2026-72904` · CVE record: firecrawl firecrawl · CVSS 9.3 Critical · Critical (CVSS 9+) · Not analysed yet · Published 10 Aug 2026 · Tags: Command injection, Code injection - [Cachet 2.4.1 Authenticated Server-Side Template Injection RCE](https://agentprime.io/advisories/CVE-2026-69118.md) `CVE-2026-69118` · CVE record: cachethq cachet · CVSS 8.7 High · Not analysed yet · Published 10 Aug 2026 · Tags: Broken access control, Code injection - [SPIP < 4.4.18 Code Injection via Navigation Endpoint on SQLite](https://agentprime.io/advisories/CVE-2026-66738.md) `CVE-2026-66738` · CVE record: SPIP SPIP · CVSS 7.7 High · Not analysed yet · Published 10 Aug 2026 · Tags: Code injection - [goose: Arbitrary command execution in goose CLI via \`goose review\` via git core.fsmonitor](https://agentprime.io/advisories/CVE-2026-72718.md) `CVE-2026-72718` · CVE record: aaif-goose goose · CVSS 7.0 High · Not analysed yet · Published 10 Aug 2026 · Tags: Code injection - [Apache Ranger: Remote Code Execution via JDBC URL Injection](https://agentprime.io/advisories/CVE-2026-42537.md) `CVE-2026-42537` · CVE record: Apache Software Foundation Apache Ranger · CVSS 9.8 Critical · Critical (CVSS 9+) · Not analysed yet · Published 10 Aug 2026 · Tags: Code injection, CWE-20 - [Apache Ranger: Remote Code Execution via Arbitrary Class Instantiation](https://agentprime.io/advisories/CVE-2026-44416.md) `CVE-2026-44416` · CVE record: Apache Software Foundation Apache Ranger · CVSS 9.8 Critical · Critical (CVSS 9+) · Not analysed yet · Published 10 Aug 2026 · Tags: Code injection - [Apache Ranger: Remote Code Execution Vulnerability in GraalScriptEngineCreator](https://agentprime.io/advisories/CVE-2026-55799.md) `CVE-2026-55799` · CVE record: Apache Software Foundation Apache Ranger · CVSS 9.8 Critical · Critical (CVSS 9+) · Not analysed yet · Published 10 Aug 2026 · Tags: Code injection - [Joomla Extension - fabrikar.com - Unauthenticated remote code execution in Fabrik < 4.7.2](https://agentprime.io/advisories/CVE-2026-66915.md) `CVE-2026-66915` · CVE record: fabrikar.com Fabrik extension for Joomla · CVSS 10.0 Critical · Critical (CVSS 9+) · Not analysed yet · Published 10 Aug 2026 · Tags: Code injection - [code-projects Task Management System CommentSave.php cross site scripting](https://agentprime.io/advisories/CVE-2026-19378.md) `CVE-2026-19378` · CVE record: code-projects Task Management System · CVSS 5.3 Medium · Not analysed yet · Published 9 Aug 2026 · Tags: Cross-site scripting (XSS), Code injection - [OpenYak local API: unauthenticated CSRF chain leads to Remote Code Execution](https://agentprime.io/advisories/CVE-2026-46409.md) `CVE-2026-46409` · CVE record: openyak openyak · CVSS 9.6 Critical · Critical (CVSS 9+) · Not analysed yet · Published 7 Aug 2026 · Tags: Code injection, Authentication bypass, Cross-site request forgery (CSRF), CWE-346 - [SourceCodester Photo Share Website Comment Input Box ajax.php save_upload cross site scripting](https://agentprime.io/advisories/CVE-2026-19230.md) `CVE-2026-19230` · CVE record: SourceCodester Photo Share Website · CVSS 5.1 Medium · Not analysed yet · Published 7 Aug 2026 · Tags: Cross-site scripting (XSS), Code injection - [Nexus Repository - Arbitrary Class Instantiation via Unsafe Realm Configuration](https://agentprime.io/advisories/CVE-2026-17593.md) `CVE-2026-17593` · CVE record: Sonatype Nexus Repository · CVSS 7.2 High · Not analysed yet · Published 7 Aug 2026 · Tags: Code injection - [Nexus Repository 3 - HikariCP connectionInitSql Injection RCE via DataStore Configuration API](https://agentprime.io/advisories/CVE-2026-17603.md) `CVE-2026-17603` · CVE record: Sonatype Nexus Repository 3 · CVSS 8.7 High · Not analysed yet · Published 7 Aug 2026 · Tags: Code injection - [SourceCodester Photo Share Website index.php home cross site scripting](https://agentprime.io/advisories/CVE-2026-19209.md) `CVE-2026-19209` · CVE record: SourceCodester Photo Share Website · CVSS 5.1 Medium · Not analysed yet · Published 7 Aug 2026 · Tags: Cross-site scripting (XSS), Code injection - [GitPython: Unguarded git option forwarding in Repo.init enables arbitrary command execution via --template clone hooks](https://agentprime.io/advisories/GHSA-9rj7-rf2p-w77r.md) `GHSA-9rj7-rf2p-w77r`, `CVE-2026-76218`, `PYSEC-2026-3840` · PyPI `gitpython`: affected `<3.1.58`, fixed in `3.1.58` · CVSS 7.7 High · Not analysed yet · Published 7 Aug 2026 · Tags: Command injection, Code injection - [PHPGurukul Company Visitor Management System manage-newvisitors.php cross site scripting](https://agentprime.io/advisories/CVE-2026-19207.md) `CVE-2026-19207` · CVE record: PHPGurukul Company Visitor Management System · CVSS 4.8 Medium · Not analysed yet · Published 7 Aug 2026 · Tags: Cross-site scripting (XSS), Code injection - [DataGear Chart Name HtmlTplDashboardWidgetHtmlRenderer.java HtmlTplDashboardWidgetHtmlRenderer cross site scripting](https://agentprime.io/advisories/CVE-2026-19110.md) `CVE-2026-19110` · CVE record: DataGear · CVSS 4.8 Medium · Not analysed yet · Published 6 Aug 2026 · Tags: Cross-site scripting (XSS), Code injection - [Unauthenticated Stored Vue Template Injection Leads to Cross-Site Scripting in CTI-Transmute](https://agentprime.io/advisories/CVE-2026-71502.md) `CVE-2026-71502` · CVE record: misp cti-transmute · CVSS 5.1 Medium · Not analysed yet · Published 6 Aug 2026 · Tags: Cross-site scripting (XSS), Code injection - [WGDashboard Server-Side Template Injection vulnerability](https://agentprime.io/advisories/CVE-2026-15734.md) `CVE-2026-15734` · CVE record: WGDashboard WGDashboard · CVSS 9.8 Critical · Critical (CVSS 9+) · Not analysed yet · Published 6 Aug 2026 · Tags: Code injection - [Mermaid allows CSS injection applying to sibling elements of the diagram](https://agentprime.io/advisories/GHSA-6x64-9x62-f2gx.md) `GHSA-6x64-9x62-f2gx`, `CVE-2026-50159` · npm `mermaid`: affected `<10.9.8 || >=11.0.0-alpha.1, <11.16.1`, fixed in `10.9.8`, `11.16.1` · CVSS 5.3 Medium · Not analysed yet · Published 6 Aug 2026 · Tags: Code injection - [Statamic: Unsafe method invocation via Antlers template resolution allows data destruction](https://agentprime.io/advisories/GHSA-j2vp-f2pv-5rj4.md) `GHSA-j2vp-f2pv-5rj4`, `CVE-2026-64663`, `PKSA-p8hp-2yrt-f2d6` · Packagist `statamic/cms`: affected `<5.74.1 || >=6.0.0, <6.24.0`, fixed in `5.74.1`, `6.24.0` · CVSS 6.5 Medium · Not analysed yet · Published 6 Aug 2026 · Tags: Code injection - [FoundationAgents MetaGPT code injection](https://agentprime.io/advisories/CVE-2026-19060.md) `CVE-2026-19060` · CVE record: FoundationAgents MetaGPT · CVSS 4.8 Medium · Not analysed yet · Published 6 Aug 2026 · Tags: Other injection, Code injection - [Dataverse Integration < 2.91 - Contributor+ Server-Side Template Injection (SSTI) to Information Disclosure](https://agentprime.io/advisories/CVE-2026-5336.md) `CVE-2026-5336` · CVE record: Unknown DataPress (Dataverse Integration) · CVSS 6.8 Medium · Not analysed yet · Published 6 Aug 2026 · Tags: Information disclosure, Code injection - [FoundationAgents MetaGPT data_interpreter.py DataInterpreter code injection](https://agentprime.io/advisories/CVE-2026-19058.md) `CVE-2026-19058` · CVE record: FoundationAgents MetaGPT · CVSS 4.8 Medium · Not analysed yet · Published 6 Aug 2026 · Tags: Other injection, Code injection - [WordPress CTX Feed plugin <= 6.6.42 - Remote Code Execution (RCE) vulnerability](https://agentprime.io/advisories/CVE-2026-66709.md) `CVE-2026-66709` · CVE record: WebAppick CTX Feed · CVSS 9.1 Critical · Critical (CVSS 9+) · Not analysed yet · Published 6 Aug 2026 · Tags: Code injection - [WordPress Spider Analyser – WordPress搜索引擎蜘蛛分析插件 plugin <= 2.1.3 - Remote Code Execution (RCE) vulnerability](https://agentprime.io/advisories/CVE-2026-65553.md) `CVE-2026-65553` · CVE record: wbolt.com Spider Analyser \– WordPress搜索引擎蜘蛛分析插件 · CVSS 10.0 Critical · Critical (CVSS 9+) · Not analysed yet · Published 6 Aug 2026 · Tags: Code injection - [WordPress Betheme theme <= 28.4.2 - Remote Code Execution (RCE) vulnerability](https://agentprime.io/advisories/CVE-2026-65548.md) `CVE-2026-65548` · CVE record: Muffingroup Betheme · CVSS 9.9 Critical · Critical (CVSS 9+) · Not analysed yet · Published 6 Aug 2026 · Tags: Code injection - [ttttonyhe OBlog tags.php cross site scripting](https://agentprime.io/advisories/CVE-2026-18968.md) `CVE-2026-18968` · CVE record: ttttonyhe OBlog · CVSS 5.3 Medium · Not analysed yet · Published 5 Aug 2026 · Tags: Cross-site scripting (XSS), Code injection - [FrontMCP: CodeCall sandbox escape -> host RCE via live Zod schema exposure by getTool](https://agentprime.io/advisories/CVE-2026-67531.md) `CVE-2026-67531` · CVE record: agentfront frontmcp · CVSS 9.3 Critical · Critical (CVSS 9+) · Not analysed yet · Published 5 Aug 2026 · Tags: Code injection - [Nuxt: Server-Side Remote Code Execution via Runtime Template Injection in Nuxt Server Island Props](https://agentprime.io/advisories/GHSA-9473-5f9j-94wq.md) `GHSA-9473-5f9j-94wq`, `CVE-2026-71320` · npm `nuxt`: affected `>=3.4.0, <3.21.10 || >=4.0.0, <4.5.1`, fixed in `3.21.10`, `4.5.1` · CVSS 8.1 High · Not analysed yet · Published 5 Aug 2026 · Tags: Other injection, Code injection - [Unauthenticated Nuxt DevTools RPC allows arbitrary command execution on the developer's host](https://agentprime.io/advisories/GHSA-279x-mwfv-vcqv.md) `GHSA-279x-mwfv-vcqv`, `CVE-2026-71319` · npm `@nuxt/devtools`: affected `<3.3.1`, fixed in `3.3.1` · CVSS 9.6 Critical · Critical (CVSS 9+) · Not analysed yet · Published 5 Aug 2026 · Tags: Code injection, Authentication bypass - [Langflow OSS is affected by arbitrary code execution in component generation, validation, and custom component handling](https://agentprime.io/advisories/CVE-2026-17624.md) `CVE-2026-17624` · CVE record: IBM Langflow OSS · CVSS 8.5 High · Not analysed yet · Published 5 Aug 2026 · Tags: Code injection - [Langflow OSS is affected by arbitrary code execution in component generation, validation, and custom component handling](https://agentprime.io/advisories/CVE-2026-17633.md) `CVE-2026-17633` · CVE record: IBM Langflow OSS · CVSS 8.5 High · Not analysed yet · Published 5 Aug 2026 · Tags: Code injection - [Langflow OSS is affected by arbitrary code execution in component generation, validation, and custom component handling](https://agentprime.io/advisories/CVE-2026-17632.md) `CVE-2026-17632` · CVE record: IBM Langflow OSS · CVSS 8.8 High · Not analysed yet · Published 5 Aug 2026 · Tags: Code injection - [Langflow OSS is affected by arbitrary code execution in component generation, validation, and custom component handling](https://agentprime.io/advisories/CVE-2026-9196.md) `CVE-2026-9196` · CVE record: IBM Langflow OSS · CVSS 8.1 High · Not analysed yet · Published 5 Aug 2026 · Tags: Code injection - [Langflow OSS is affected by arbitrary code execution in component generation, validation, and custom component handling](https://agentprime.io/advisories/CVE-2026-8182.md) `CVE-2026-8182` · CVE record: IBM Langflow OSS · CVSS 8.8 High · Not analysed yet · Published 5 Aug 2026 · Tags: Code injection - [Langflow OSS is affected by arbitrary code execution in component generation, validation, and custom component handling](https://agentprime.io/advisories/CVE-2026-8478.md) `CVE-2026-8478` · CVE record: IBM Langflow OSS · CVSS 8.8 High · Not analysed yet · Published 5 Aug 2026 · Tags: Code injection - [Code injection in Jenkins Project Jenkins Multijob Plugin](https://agentprime.io/advisories/CVE-2026-70431.md) `CVE-2026-70431` · CVE record: Jenkins Project Jenkins Multijob Plugin · CVSS 8.8 High · Not analysed yet · Published 5 Aug 2026 · Tags: Code injection - [Electron: DevTools JavaScript Injection via Unsanitized Dock State Parameter](https://agentprime.io/advisories/GHSA-4f78-qhmw-8j8m.md) `GHSA-4f78-qhmw-8j8m`, `CVE-2026-70609` · npm `electron`: affected `<39.8.7 || >=40.0.0-alpha.1, <40.9.0 || >=41.0.0-alpha.1, <41.2.0 || >=42.0.0-alpha.1, <42.0.0-beta.1`, fixed in `39.8.7`, `40.9.0`, `41.2.0`, `42.0.0-beta.1` · CVSS 5.7 Medium · Not analysed yet · Published 5 Aug 2026 · Tags: Code injection, CWE-116 - [Multiple Vulnerabilities in IBM® Java SDK affect IBM WebSphere Application Server and WebSphere Application Server Liberty due to the July 2026 CPU](https://agentprime.io/advisories/CVE-2026-8400.md) `CVE-2026-8400` · CVE record: IBM WebSphere Application Server and 1 more · CVSS 8.1 High · Not analysed yet · Published 5 Aug 2026 · Tags: Code injection Newest: Older: ## Filters and formats Filters are query parameters on this URL: `q` (words, as in a web search engine: `"a phrase"`, `OR`, `-word`; an id; a package or product name), `severity` (low, medium, high or critical), `critical=1`, `kev=1`, `ecosystem` (npm, pypi, packagist, go, maven, rubygems, crates, nuget, hex), `kind=package`, `assigner` (a CNA’s short name), `min_score` and `state`. Each record’s title links to its Markdown page. - The same list as JSON: - Every list: , critical: ; by weakness: and the other tags in ; by technology: `/advisories/technology/.md` (`fortinet-fortimail`) --- The web page: . Everything for agents: .