# Code injection. Untrusted input evaluated as code: eval, templates, expression languages. Every Advisory and CVE whose weakness (CWE) is one of these, newest first. ## Records, newest first (an older page) - [Blossom Article Title ArticleController.java content cross site scripting](https://agentprime.io/advisories/CVE-2026-2622.md) `CVE-2026-2622` · CVE record: Blossom · CVSS 5.1 Medium · Not analysed yet · Published 17 Feb 2026 · Tags: Cross-site scripting (XSS), Code injection - [OpenClaw Affected by Remote Code Execution via System Prompt Injection in Slack Channel Descriptions](https://agentprime.io/advisories/GHSA-782p-5fr5-7fj8.md) `GHSA-782p-5fr5-7fj8`, `CVE-2026-24764` · npm `openclaw`: affected `<2026.2.3`, fixed in `2026.2.3` · CVSS 3.7 Low · Not analysed yet · Published 17 Feb 2026 · Tags: Other injection, Code injection - [A Server-Side Template Injection (SSTI) vulnerability in the Freemarker template engine of Datart v1.0.0-rc.3 allows authenticated attackers to execute arbitrary code via injecting crafted Freemarker…](https://agentprime.io/advisories/CVE-2025-70830.md) `CVE-2025-70830` · CVE record · CVSS 9.9 Critical · Critical (CVSS 9+) · Not analysed yet · Published 17 Feb 2026 · Tags: Code injection - [cskefu File Upload MediaController.java upload cross site scripting](https://agentprime.io/advisories/CVE-2026-2557.md) `CVE-2026-2557` · CVE record: cskefu · CVSS 5.1 Medium · Not analysed yet · Published 16 Feb 2026 · Tags: Cross-site scripting (XSS), Code injection - [LigeroSmart index.pl AgentDashboard cross site scripting](https://agentprime.io/advisories/CVE-2026-2547.md) `CVE-2026-2547` · CVE record: LigeroSmart · CVSS 5.1 Medium · Not analysed yet · Published 16 Feb 2026 · Tags: Cross-site scripting (XSS), Code injection - [LigeroSmart index.pl cross site scripting](https://agentprime.io/advisories/CVE-2026-2546.md) `CVE-2026-2546` · CVE record: LigeroSmart · CVSS 5.1 Medium · Not analysed yet · Published 16 Feb 2026 · Tags: Cross-site scripting (XSS), Code injection - [LigeroSmart index.pl cross site scripting](https://agentprime.io/advisories/CVE-2026-2545.md) `CVE-2026-2545` · CVE record: LigeroSmart · CVSS 5.1 Medium · Not analysed yet · Published 16 Feb 2026 · Tags: Cross-site scripting (XSS), Code injection - [An issue in Visual Studio Code Extensions Markdown Preview Enhanced v0.8.18 allows attackers to execute arbitrary code via uploading a crafted .Md file.](https://agentprime.io/advisories/CVE-2025-65716.md) `CVE-2025-65716` · CVE record · CVSS 8.8 High · Not analysed yet · Published 16 Feb 2026 · Tags: Code injection - [An issue in the code-runner.executorMap setting of Visual Studio Code Extensions Code Runner v0.12.2 allows attackers to execute arbitrary code when opening a crafted workspace.](https://agentprime.io/advisories/CVE-2025-65715.md) `CVE-2025-65715` · CVE record · CVSS 7.8 High · Not analysed yet · Published 16 Feb 2026 · Tags: Code injection - [Apache Avro Java SDK is Vulnerable to Code Injection](https://agentprime.io/advisories/GHSA-rp46-r563-jrc7.md) `GHSA-rp46-r563-jrc7`, `CVE-2025-33042`, `PYSEC-2026-26` · Maven `org.apache.avro:avro-compiler`: affected `>=1.12.0, <1.12.1 || <1.11.5`, fixed in `1.12.1`, `1.11.5` · CVSS 7.3 High · Not analysed yet · Published 13 Feb 2026 · Tags: Code injection - [Arbitrary WASM Code Execution via AnnotationOverrideFlight Injection in Yoke ATC](https://agentprime.io/advisories/GHSA-wj8p-jj64-h7ff.md) `GHSA-wj8p-jj64-h7ff`, `CVE-2026-26056`, `GO-2026-4493` · Go `github.com/yokecd/yoke`: affected `<=0.19.0`, no fixed version yet · CVSS 8.8 High · Not analysed yet · Published 12 Feb 2026 · Tags: Code injection - [authentik affected by Remote Code Execution via Context Key Injection in PropertyMapping Test Endpoint](https://agentprime.io/advisories/CVE-2026-25227.md) `CVE-2026-25227` · CVE record: goauthentik authentik · CVSS 9.1 Critical · Critical (CVSS 9+) · Not analysed yet · Published 12 Feb 2026 · Tags: Code injection - [next-mdx-remote affected by arbitrary code execution in React server-side rendering of untrusted MDX content](https://agentprime.io/advisories/GHSA-g4xw-jxrg-5f6m.md) `GHSA-g4xw-jxrg-5f6m`, `CVE-2026-0969` · npm `next-mdx-remote`: affected `>=4.3.0, <6.0.0`, fixed in `6.0.0` · CVSS 8.8 High · Not analysed yet · Published 12 Feb 2026 · Tags: Code injection - [An issue in filosoft Comerc.32 Commercial Invoicing v.16.0.0.3 allows a local attacker to execute arbitrary code via the comeinst.exe file](https://agentprime.io/advisories/CVE-2025-63421.md) `CVE-2025-63421` · CVE record · CVSS 7.8 High · Not analysed yet · Published 12 Feb 2026 · Tags: Code injection - [DiskCache has unsafe pickle deserialization](https://agentprime.io/advisories/GHSA-w8v5-vhqr-4h9v.md) `GHSA-w8v5-vhqr-4h9v`, `CVE-2025-69872`, `PYSEC-2026-2447` · PyPI `diskcache`: affected `<=5.6.3`, no fixed version yet · CVSS 9.8 Critical · Critical (CVSS 9+) · Not analysed yet · Published 11 Feb 2026 · Tags: Code injection, Insecure deserialization - [Chevereto 3.13.4 Core - Remote Code Execution](https://agentprime.io/advisories/CVE-2020-37186.md) `CVE-2020-37186` · CVE record: Chevere SpA Chevereto · CVSS 9.3 Critical · Critical (CVSS 9+) · Not analysed yet · Published 11 Feb 2026 · Tags: Code injection - [KeePass 2.44 - Denial of Service (PoC)](https://agentprime.io/advisories/CVE-2020-37178.md) `CVE-2020-37178` · CVE record: Keepass KeePass Password Safe · CVSS 4.6 Medium · Not analysed yet · Published 11 Feb 2026 · Tags: Code injection - [Code injection in Schneider Electric EcoStruxure Building Operation Workstation and others](https://agentprime.io/advisories/CVE-2026-1226.md) `CVE-2026-1226` · CVE record: Schneider Electric EcoStruxure Building Operation Workstation and 1 more · CVSS 7.0 High · Not analysed yet · Published 11 Feb 2026 · Tags: Code injection - [File Station 5](https://agentprime.io/advisories/CVE-2025-57707.md) `CVE-2025-57707` · CVE record: QNAP Systems Inc. File Station 5 · CVSS 1.1 Low · Not analysed yet · Published 11 Feb 2026 · Tags: Code injection - [Custom Block Builder – Lazy Blocks <= 4.2.0 - Authenticated (Contributor+) Remote Code Execution](https://agentprime.io/advisories/CVE-2026-1560.md) `CVE-2026-1560` · CVE record: nko Custom Block Builder – Lazy Blocks · CVSS 8.8 High · Critical (CVSS 7+ and EPSS) · EPSS 0.10 · Not analysed yet · Published 11 Feb 2026 · Tags: Code injection - [Lucky Wheel Giveaway <= 1.0.22 - Authenticated (Administrator+) Remote Code Execution via 'conditional_tags' Parameter](https://agentprime.io/advisories/CVE-2025-14541.md) `CVE-2025-14541` · CVE record: villatheme Lucky Wheel Giveaway · CVSS 7.2 High · Not analysed yet · Published 11 Feb 2026 · Tags: Code injection - [GitHub Copilot and Visual Studio Remote Code Execution Vulnerability](https://agentprime.io/advisories/CVE-2026-21256.md) `CVE-2026-21256` · CVE record: Microsoft Microsoft Visual Studio 2022 version 17.14 and 1 more · CVSS 8.8 High · Not analysed yet · Published 10 Feb 2026 · Tags: Command injection, Code injection - [Microsoft Defender for Endpoint Linux Extension Remote Code Execution Vulnerability](https://agentprime.io/advisories/CVE-2026-21537.md) `CVE-2026-21537` · CVE record: Microsoft Microsoft Defender for Endpoint for Linux · CVSS 8.8 High · Not analysed yet · Published 10 Feb 2026 · Tags: Code injection - [Unauthenticated Remote Code Execution via P2P Sharing in ZAI-Shell](https://agentprime.io/advisories/CVE-2026-25807.md) `CVE-2026-25807` · CVE record: TaklaXBR zai-shell · CVSS 8.8 High · Not analysed yet · Published 9 Feb 2026 · Tags: Code injection - [Craft CMS Vulnerable to potential authenticated Remote Code Execution via malicious attached Behavior](https://agentprime.io/advisories/GHSA-7jx7-3846-m7w7.md) `GHSA-7jx7-3846-m7w7`, `CVE-2026-25498`, `PKSA-g2n6-j3mn-x8xf` · Packagist `craftcms/cms`: affected `>=4.0.0-RC1, <4.16.18 || >=5.0.0-RC1, <5.8.22`, fixed in `4.16.18`, `5.8.22` · CVSS 8.6 High · Not analysed yet · Published 9 Feb 2026 · Tags: Code injection - [code-projects Online Reviewer System btn_functions.php cross site scripting](https://agentprime.io/advisories/CVE-2026-2224.md) `CVE-2026-2224` · CVE record: code-projects Online Reviewer System · CVSS 5.1 Medium · Not analysed yet · Published 9 Feb 2026 · Tags: Cross-site scripting (XSS), Code injection - [code-projects Online Reviewer System btn_functions.php cross site scripting](https://agentprime.io/advisories/CVE-2026-2222.md) `CVE-2026-2222` · CVE record: code-projects Online Reviewer System · CVSS 4.8 Medium · Not analysed yet · Published 9 Feb 2026 · Tags: Cross-site scripting (XSS), Code injection - [Improper Neutralization of Special Elements Used in a Template Engine in GitLab AI Gateway](https://agentprime.io/advisories/CVE-2026-1868.md) `CVE-2026-1868` · CVE record: GitLab GitLab AI Gateway · CVSS 9.9 Critical · Critical (CVSS 9+) · Not analysed yet · Published 9 Feb 2026 · Tags: Code injection - [jsonpath has Arbitrary Code Injection via Unsafe Evaluation of JSON Path Expressions](https://agentprime.io/advisories/GHSA-87r5-mp6g-5w5j.md) `GHSA-87r5-mp6g-5w5j`, `CVE-2026-1615` · npm `jsonpath`: affected `<1.3.0`, fixed in `1.3.0` · CVSS 9.2 Critical · Critical (CVSS 9+) · Not analysed yet · Published 9 Feb 2026 · Tags: Code injection - [code-projects for Plugin AdminAddAlbum.php cross site scripting](https://agentprime.io/advisories/CVE-2026-2214.md) `CVE-2026-2214` · CVE record: code-projects for Plugin · CVSS 4.8 Medium · Not analysed yet · Published 9 Feb 2026 · Tags: Cross-site scripting (XSS), Code injection - [ZeroWdd studentmanager LeaveController.java addLeave cross site scripting](https://agentprime.io/advisories/CVE-2026-2201.md) `CVE-2026-2201` · CVE record: ZeroWdd studentmanager · CVSS 4.8 Medium · Not analysed yet · Published 9 Feb 2026 · Tags: Cross-site scripting (XSS), Code injection - [heyewei JFinalCMS API Endpoint save cross site scripting](https://agentprime.io/advisories/CVE-2026-2200.md) `CVE-2026-2200` · CVE record: heyewei JFinalCMS · CVSS 4.8 Medium · Not analysed yet · Published 9 Feb 2026 · Tags: Cross-site scripting (XSS), Code injection - [SourceCodester Simple Responsive Tourism Website Master.php cross site scripting](https://agentprime.io/advisories/CVE-2026-2160.md) `CVE-2026-2160` · CVE record: SourceCodester Simple Responsive Tourism Website · CVSS 5.3 Medium · Not analysed yet · Published 8 Feb 2026 · Tags: Cross-site scripting (XSS), Code injection - [SourceCodester Simple Responsive Tourism Website Registration Master.php cross site scripting](https://agentprime.io/advisories/CVE-2026-2159.md) `CVE-2026-2159` · CVE record: SourceCodester Simple Responsive Tourism Website · CVSS 5.3 Medium · Not analysed yet · Published 8 Feb 2026 · Tags: Cross-site scripting (XSS), Code injection - [code-projects Online Student Management System Announcement Management index.php cross site scripting](https://agentprime.io/advisories/CVE-2026-2156.md) `CVE-2026-2156` · CVE record: code-projects Online Student Management System · CVSS 4.8 Medium · Not analysed yet · Published 8 Feb 2026 · Tags: Cross-site scripting (XSS), Code injection - [SourceCodester/Patrick Mvuma Patients Waiting Area Queue Management System Patient Registration registration.php cross site scripting](https://agentprime.io/advisories/CVE-2026-2154.md) `CVE-2026-2154` · CVE record: SourceCodester Patients Waiting Area Queue Management System and 1 more · CVSS 5.3 Medium · Not analysed yet · Published 8 Feb 2026 · Tags: Cross-site scripting (XSS), Code injection - [SourceCodester/Patrick Mvuma Patients Waiting Area Queue Management System checkin.php cross site scripting](https://agentprime.io/advisories/CVE-2026-2150.md) `CVE-2026-2150` · CVE record: SourceCodester Patients Waiting Area Queue Management System and 1 more · CVSS 5.3 Medium · Not analysed yet · Published 8 Feb 2026 · Tags: Cross-site scripting (XSS), Code injection - [SourceCodester/Patrick Mvuma Patients Waiting Area Queue Management System appointments.php cross site scripting](https://agentprime.io/advisories/CVE-2026-2149.md) `CVE-2026-2149` · CVE record: SourceCodester Patients Waiting Area Queue Management System and 1 more · CVSS 5.3 Medium · Not analysed yet · Published 8 Feb 2026 · Tags: Cross-site scripting (XSS), Code injection - [cym1102 nginxWebUI Web Management check cross site scripting](https://agentprime.io/advisories/CVE-2026-2145.md) `CVE-2026-2145` · CVE record: cym1102 nginxWebUI · CVSS 5.1 Medium · Not analysed yet · Published 8 Feb 2026 · Tags: Cross-site scripting (XSS), Code injection - [Calibre Affected by Arbitrary Code Execution via Server-Side Template Injection in Calibre HTML Export](https://agentprime.io/advisories/CVE-2026-25731.md) `CVE-2026-25731` · CVE record: kovidgoyal calibre · CVSS 7.8 High · Not analysed yet · Published 6 Feb 2026 · Tags: Code injection - [calibre has a Path Traversal Leading to Arbitrary File Corruption and Code Execution](https://agentprime.io/advisories/CVE-2026-25636.md) `CVE-2026-25636` · CVE record: kovidgoyal calibre · CVSS 8.2 High · Not analysed yet · Published 6 Feb 2026 · Tags: Path traversal, Code injection - [Portabilis i-Educar User Data meusdadod.php cross site scripting](https://agentprime.io/advisories/CVE-2026-2064.md) `CVE-2026-2064` · CVE record: Portabilis i-Educar · CVSS 5.1 Medium · Not analysed yet · Published 6 Feb 2026 · Tags: Cross-site scripting (XSS), Code injection - [abhiphile fermat-mcp eqn_chart.py eqn_chart code injection](https://agentprime.io/advisories/CVE-2026-2008.md) `CVE-2026-2008` · CVE record: abhiphile fermat-mcp · CVSS 5.3 Medium · Not analysed yet · Published 6 Feb 2026 · Tags: Other injection, Code injection - [isaacwasserman mcp-vegalite-server visualize_data eval code injection](https://agentprime.io/advisories/CVE-2026-1977.md) `CVE-2026-1977` · CVE record: isaacwasserman mcp-vegalite-server · CVSS 5.3 Medium · Not analysed yet · Published 6 Feb 2026 · Tags: Other injection, Code injection - [Edimax BR-6288ACL wiz_WISP24gmanual.asp wiz_WISP24gmanual cross site scripting](https://agentprime.io/advisories/CVE-2026-1971.md) `CVE-2026-1971` · CVE record: Edimax BR-6288ACL · CVSS 4.8 Medium · Not analysed yet · Published 6 Feb 2026 · Tags: Cross-site scripting (XSS), Code injection - [@nyariv/sandboxjs has a Sandbox Escape vulnerability](https://agentprime.io/advisories/GHSA-66h4-qj4x-38xp.md) `GHSA-66h4-qj4x-38xp`, `CVE-2026-25587` · npm `@nyariv/sandboxjs`: affected `<0.8.29`, fixed in `0.8.29` · CVSS 10.0 Critical · Critical (CVSS 9+) · Not analysed yet · Published 5 Feb 2026 · Tags: Other injection, Code injection - [LAN Code Execution on TP-Link Archer MR200, Archer C20, TL-WR850N and TL-WR845N](https://agentprime.io/advisories/CVE-2025-15551.md) `CVE-2025-15551` · CVE record: TP-Link Systems Inc. Archer MR200 v5.2 and 4 more · CVSS 5.9 Medium · Not analysed yet · Published 5 Feb 2026 · Tags: Code injection - [PHP-Fusion 9.03.50 - 'panels.php' Eval Injection](https://agentprime.io/advisories/CVE-2020-37137.md) `CVE-2020-37137` · CVE record: PHP Fusion PHP Fusion · CVSS 8.6 High · Not analysed yet · Published 5 Feb 2026 · Tags: Code injection - [Potential code smuggling via doc comments in cmd/cgo](https://agentprime.io/advisories/GO-2026-4433.md) `GO-2026-4433`, `BIT-golang-2025-61732`, `CVE-2025-61732` · Go `toolchain`: affected `<1.24.13 || >=1.25.0-0, <1.25.7`, fixed in `1.24.13`, `1.25.7` · CVSS 8.6 High · Not analysed yet · Published 5 Feb 2026 · Tags: Code injection - [An issue in ChestnutCMS v.1.5.8 and before allows a remote attacker to execute arbitrary code via the template creation function](https://agentprime.io/advisories/CVE-2025-70073.md) `CVE-2025-70073` · CVE record · CVSS 7.2 High · Not analysed yet · Published 5 Feb 2026 · Tags: Code injection - [Skipper is vulnerable to arbitrary code execution through lua filters in github.com/zalando/skipper](https://agentprime.io/advisories/GHSA-cc8m-98fm-rc9g.md) `GHSA-cc8m-98fm-rc9g`, `CVE-2026-23742`, `GO-2026-4327` · Go `github.com/zalando/skipper`: affected `<0.23.0`, fixed in `0.23.0` · CVSS 8.8 High · Not analysed yet · Published 3 Feb 2026 · Tags: Code injection, Privilege escalation, Hard-coded credentials - [Code injection in NVIDIA Megatron-LM](https://agentprime.io/advisories/CVE-2026-24149.md) `CVE-2026-24149` · CVE record: NVIDIA Megatron-LM · CVSS 7.8 High · Not analysed yet · Published 3 Feb 2026 · Tags: Code injection - [Claude Code has a Command Injection in find Command Bypasses User Approval Prompt](https://agentprime.io/advisories/GHSA-qgqw-h4xq-7w8w.md) `GHSA-qgqw-h4xq-7w8w`, `CVE-2026-24887` · npm `@anthropic-ai/claude-code`: affected `<2.0.72`, fixed in `2.0.72` · CVSS 7.7 High · Not analysed yet · Published 3 Feb 2026 · Tags: Command injection, Code injection - [FUXA allows Remote Code Execution (RCE) via the project import functionality.](https://agentprime.io/advisories/GHSA-5r63-q8hg-p8qx.md) `GHSA-5r63-q8hg-p8qx`, `CVE-2025-69983` · npm `fuxa-server`: affected `<=1.2.7`, no fixed version yet · CVSS 9.8 Critical · Critical (CVSS 9+) · Not analysed yet · Published 3 Feb 2026 · Tags: Command injection, Code injection - [JinJava Bypass through ForTag leads to Arbitrary Java Execution](https://agentprime.io/advisories/GHSA-gjx9-j8f8-7j74.md) `GHSA-gjx9-j8f8-7j74`, `CVE-2026-25526` · Maven `com.hubspot.jinjava:jinjava`: affected `>=2.8.0, <2.8.3 || <2.7.6`, fixed in `2.8.3`, `2.7.6` · CVSS 9.8 Critical · Critical (CVSS 9+) · Not analysed yet · Published 3 Feb 2026 · Tags: Code injection - [CI4MS Vulnerable to Remote Code Execution (RCE) via Arbitrary File Creation and Save in File Editor](https://agentprime.io/advisories/GHSA-gp56-f67f-m4px.md) `GHSA-gp56-f67f-m4px`, `CVE-2026-25510`, `PKSA-ztv6-h3sy-m4xc` · Packagist `ci4-cms-erp/ci4ms`: affected `<0.28.5.0`, fixed in `0.28.5.0` · CVSS 10.0 Critical · Critical (CVSS 9+) · Not analysed yet · Published 2 Feb 2026 · Tags: Code injection, Unrestricted file upload - [@backstage/plugin-techdocs-node vulnerable to arbitrary code execution via MkDocs hooks](https://agentprime.io/advisories/GHSA-6jr7-99pf-8vgf.md) `GHSA-6jr7-99pf-8vgf`, `CVE-2026-25153` · npm `@backstage/plugin-techdocs-node`: affected `<1.13.11 || >=1.14.0, <1.14.1`, fixed in `1.13.11`, `1.14.1` · CVSS 7.7 High · Not analysed yet · Published 2 Feb 2026 · Tags: Code injection - [SandboxJS Vulnerable to Prototype Pollution -> Sandbox Escape -> RCE](https://agentprime.io/advisories/GHSA-9p4w-fq8m-2hp7.md) `GHSA-9p4w-fq8m-2hp7`, `CVE-2026-25142` · npm `@nyariv/sandboxjs`: affected `<0.8.27`, fixed in `0.8.27` · CVSS 10.0 Critical · Critical (CVSS 9+) · Not analysed yet · Published 2 Feb 2026 · Tags: Code injection, Prototype pollution - [jsPDF has PDF Injection in AcroFormChoiceField that allows Arbitrary JavaScript Execution](https://agentprime.io/advisories/GHSA-pqxr-3g65-p328.md) `GHSA-pqxr-3g65-p328`, `CVE-2026-24737` · npm `jspdf`: affected `<4.1.0`, fixed in `4.1.0` · CVSS 8.1 High · Not analysed yet · Published 2 Feb 2026 · Tags: Code injection, CWE-116 - [D-Link DSL-6641K sp_pppoe_user.js doSubmitPPP cross site scripting](https://agentprime.io/advisories/CVE-2026-1744.md) `CVE-2026-1744` · CVE record: D-Link DSL-6641K · CVSS 4.8 Medium · Not analysed yet · Published 2 Feb 2026 · Tags: Cross-site scripting (XSS), Code injection Newest: Older: ## Filters and formats Filters are query parameters on this URL: `q` (words, as in a web search engine: `"a phrase"`, `OR`, `-word`; an id; a package or product name), `severity` (low, medium, high or critical), `critical=1`, `kev=1`, `ecosystem` (npm, pypi, packagist, go, maven, rubygems, crates, nuget, hex), `kind=package`, `assigner` (a CNA’s short name), `min_score` and `state`. Each record’s title links to its Markdown page. - The same list as JSON: - Every list: , critical: ; by weakness: and the other tags in ; by technology: `/advisories/technology/.md` (`fortinet-fortimail`) --- The web page: . Everything for agents: .