Advisories · Weakness
Code injection.
Untrusted input evaluated as code: eval, templates, expression languages. Every Advisory and CVE whose weakness (CWE) is one of these, newest first.
- CVSS 8.7 High
Frappe Framework ERPNext 13.4.0 Remote Code Execution
- Frappe Technologies Frappe Framework (ERPNext)
- Code injection
- CVSS 9.8 CriticalCritical · CVSS 9+
ERPNext v15.103.1 and before is vulnerable to Server-Side Template Injection (SSTI).
- Code injection
- CVSS 8.7 High
AzuraCast Vulnerable to Liquidsoap Code Injection via Incomplete cleanUpString-to-toRawString Migration in Remote Relay Password Field
- Code injection
<0.23.6 · fixed in 0.23.6
GHSA-q4ph-8x8g-95f8 · CVE-2026-100856 - CVSS 9.0 CriticalCritical · CVSS 9+
Sandboxed Thymeleaf expressions vulnerable to improper recognition of unauthorized syntax patterns
- Code injection
<3.1.5.RELEASE · fixed in 3.1.5.RELEASE
GHSA-c9ph-gxww-7744 · CVE-2026-41901 - CVSS 7.8 High
pyp2spec is Vulnerable to Code Injection
- Code injection
- CWE-20
<0.14.1 · fixed in 0.14.1
GHSA-r35x-v8p8-xvhw · CVE-2026-42301 - CVSS 9.1 CriticalCritical · CVSS 9+
OpenMRS has Stored Velocity SSTI to RCE via ConceptReferenceRange
- Code injection
>=2.7.0, <2.7.9 || >=2.8.0, <2.8.6 · fixed in 2.7.9, 2.8.6
GHSA-xj4f-8jjg-vx4q · CVE-2026-41258 - CVSS 9.4 CriticalCritical · CVSS 9+
Apache Polaris has an Improper Input Validation issue
- Code injection
- CWE-20
<1.4.1 · fixed in 1.4.1
GHSA-fc3h-c6h7-r83j · CVE-2026-42811 - CVSS 9.8 CriticalCritical · CVSS 9+
Apache OpenNLP ExtensionLoader Vulnerable to Arbitrary Class Instantiation via Model Manifest
- Code injection
- Insecure deserialization
>=2.0.0, <2.5.9 || >=3.0.0-M1, <3.0.0-M3 || <1.9.5 · fixed in 2.5.9, 3.0.0-M3, 1.9.5
GHSA-cx4m-2p55-rw7j · CVE-2026-42027 - CVSS 7.1 High
Apache Atlas has a Code Injection Vulnerability
- Code injection
>=0.8, <2.5.0 · fixed in 2.5.0
GHSA-35xx-9xrg-gwhf · CVE-2026-40563 - CVSS 9.6 CriticalCritical · CVSS 9+
Notesnook: RCE via stored XSS in note export rendering
- streetwriters notesnook
- Cross-site scripting (XSS)
- Code injection
- CVSS 9.8 CriticalCritical · CVSS 9+
VM2 Sandbox Breakout Through __lookupGetter__
- Code injection
- CWE-693
<3.11.0 · fixed in 3.11.0
GHSA-grj5-jjm8-h35p · CVE-2026-24118 - CVSS 7.2 High
RCE in Profelis Informatics' SambaBox
- Profelis Information and Consulting Trade and Industry Limited Company SambaBox
- Code injection
- CVSS 7.8 High
An issue in Lymphatus caesium-image-compressor All versions up to and including commit 02da2c6 allows a local attacker to execute arbitrary code via the shutdownMachine and putMachineToSleep function…
- Command injection
- Code injection
- CVSS 6.9 Medium
AV Stumpfl Pixera Two Media Server Websocket API code injection
- AV Stumpfl Pixera Two Media Server
- Other injection
- Code injection
- CVSS 5.1 Medium
kerwincui FastBee System Notice SysNoticeController.java add cross site scripting
- kerwincui FastBee
- Cross-site scripting (XSS)
- Code injection
- CVSS 6.3 Medium
SGLang has an Improper Input Validation/Injection Issue
- Other injection
- Code injection
<=0.5.9 · no fixed version yet
GHSA-6m5f-673f-5vh7 · CVE-2026-7669 - CVSS 8.8 High
Widget Options <= 4.2.2 - Authenticated (Contributor+) Remote Code Execution via Display Logic
- marketingfire Widget Options – Advanced Conditional Visibility for Gutenberg Blocks & Classic Widgets
- Marketing Fire, LLC Widget Options - Extended
- Code injection
- CVSS 5.3 Medium
nextlevelbuilder ui-ux-pro-max-skill Slide Generator generate-slide.py data.get cross site scripting
- nextlevelbuilder ui-ux-pro-max-skill
- Cross-site scripting (XSS)
- Code injection
- CVSS 5.3 Medium
nextlevelbuilder ui-ux-pro-max-skill Tailwind Config Generator tailwind_config_gen.py _format_plugins code injection
- nextlevelbuilder ui-ux-pro-max-skill
- Other injection
- Code injection
- CVSS 4.8 Medium
Exiftool JPEG/QuickTime/MOV/MP4 GM.pm Process_mrld code injection
- Exiftool
- Other injection
- Code injection
- CVSS 5.3 Medium
Bootstrap CMS Page Creation show.blade.php code injection
- Bootstrap CMS
- Other injection
- Code injection
- CVSS 8.8 High
Authenticated Remote Code Execution Vulnerability in Langflow Code Validation Endpoint
- IBM Langflow Desktop
- Code injection
- CVSS 5.1 Medium
LinkStackOrg LinkStack UserController.php editPage cross site scripting
- LinkStack
- Cross-site scripting (XSS)
- Code injection
- CVSS 8.1 High
Krayin CRM allows a remote attacker to execute arbitrary code via compose email function
- Code injection
>=2.1.5, <2.1.6 · fixed in 2.1.6
GHSA-32px-ccfx-cxq3 · CVE-2026-36340 - CVSS 7.4 High
Possible QML code injection in VectorImage component
- Qt
- Code injection
- CWE-20
- CVSS 7.1 High
n8n has a Python Task Runner Sandbox Escape Vulnerability
- Code injection
<1.123.32 || >=2.17.0, <2.17.4 || >=2.18.0, <2.18.1 · fixed in 1.123.32, 2.17.4, 2.18.1
GHSA-44v6-jhgm-p3m4 · CVE-2026-42234 - CVSS 8.7 High
Cockpit CMS Authenticated Remote Code Execution via Collections
- Cockpit CMS
- Code injection
- CVSS 5.3 Medium
SourceCodester CET Automated Grading System with AI Predictive Analytics Registration index.php register cross site scripting
- SourceCodester CET Automated Grading System with AI Predictive Analytics
- Cross-site scripting (XSS)
- Code injection
- CVSS 7.7 High
AgentFlow Arbitrary Python Pipeline Execution via pipeline_path
- berabuddies AgentFlow
- Code injection
- CVSS 5.1 Medium
SourceCodester Pharmacy Sales and Inventory System index.php customer cross site scripting
- SourceCodester Pharmacy Sales and Inventory System
- Cross-site scripting (XSS)
- Code injection
- CVSS 9.8 CriticalCritical · CVSS 9+
Cockpit is vulnerable to arbitrary code execution
- Code injection
<2.14.0 · fixed in 2.14.0
GHSA-fm6c-rhcf-7439 · CVE-2026-38992 - CVSS 5.1 Medium
EyouCMS Template File FilemanagerLogic.php editFile code injection
- EyouCMS
- Other injection
- Code injection
- CVSS 4.8 Medium
SourceCodester Pizzafy Ecommerce System ajax.php save_user cross site scripting
- SourceCodester Pizzafy Ecommerce System
- Cross-site scripting (XSS)
- Code injection
- CVSS 4.8 Medium
SourceCodester Pizzafy Ecommerce System ajax.php save_order cross site scripting
- SourceCodester Pizzafy Ecommerce System
- Cross-site scripting (XSS)
- Code injection
- CVSS 4.8 Medium
SourceCodester Pizzafy Ecommerce System ajax.php save_menu cross site scripting
- SourceCodester Pizzafy Ecommerce System
- Cross-site scripting (XSS)
- Code injection
- CVSS 4.8 Medium
SourceCodester Pizzafy Ecommerce System index.php save_settings cross site scripting
- SourceCodester Pizzafy Ecommerce System
- Cross-site scripting (XSS)
- Code injection
- CVSS 9.2 CriticalCritical · CVSS 9+, CVSS 7+ and EPSS
OpenCATS PHP Code Injection via installer AJAX endpoint
- OpenCATS
- Code injection
- CVSS 4.8 Medium
SourceCodester Pharmacy Sales and Inventory System index.php supplier cross site scripting
- SourceCodester Pharmacy Sales and Inventory System
- Cross-site scripting (XSS)
- Code injection
- CVSS 4.8 Medium
SourceCodester Pharmacy Sales and Inventory System index.php cross site scripting
- SourceCodester Pharmacy Sales and Inventory System
- Cross-site scripting (XSS)
- Code injection
- CVSS 8.6 High
Spring AI has a VectorStore FilterExpression Converter injection
- Code injection
>=1.0.0, <1.0.6 || >=1.1.0, <1.1.5 · fixed in 1.0.6, 1.1.5
GHSA-qc4j-qjqx-vr58 · CVE-2026-40967 - CVSS 5.3 Medium
SourceCodester Safety Anger Pad cross site scripting
- SourceCodester Safety Anger Pad
- Cross-site scripting (XSS)
- Code injection
- CVSS 5.1 Medium
code-projects Coaching Management System Complaint Form complaint.php cross site scripting
- code-projects Coaching Management System
- Cross-site scripting (XSS)
- Code injection
- CVSS 5.3 Medium
SourceCodester Pharmacy Sales and Inventory System index.php cross site scripting
- SourceCodester Pharmacy Sales and Inventory System
- Cross-site scripting (XSS)
- Code injection
- CVSS 8.6 High
Arbitrary Code Execution via Sandbox Bypass in the open source solution QnABot on AWS
- QnABot on AWS
- Code injection
- CVSS 5.3 Medium
SourceCodester Pharmacy Sales and Inventory System index.php cross site scripting
- SourceCodester Pharmacy Sales and Inventory System
- Cross-site scripting (XSS)
- Code injection
- CVSS 5.3 Medium
code-projects Employee Management System mark.php cross site scripting
- code-projects Employee Management System
- Cross-site scripting (XSS)
- Code injection
- CVSS 5.1 Medium
code-projects Invoice System in Laravel item cross site scripting
- code-projects Invoice System in Laravel
- Cross-site scripting (XSS)
- Code injection
- CVSS 5.3 Medium
code-projects Employee Management System edit.php cross site scripting
- code-projects Employee Management System
- Cross-site scripting (XSS)
- Code injection
- CVSS 4.8 Medium
code-projects Chat System send_message.php cross site scripting
- code-projects Chat System
- Cross-site scripting (XSS)
- Code injection
- CVSS 5.3 Medium
code-projects Home Service System Appointment Booking booking.php cross site scripting
- code-projects Home Service System
- Cross-site scripting (XSS)
- Code injection
- CVSS 4.8 Medium
D-Link DSL-2740R Wireless Setup Section cross site scripting
- D-Link DSL-2740R
- Cross-site scripting (XSS)
- Code injection
- CVSS 6.8 Medium
D-Link DGS-3420 System Information Settings cross site scripting
- D-Link DGS-3420
- Cross-site scripting (XSS)
- Code injection
- CVSS 4.8 Medium
MaxSite CMS ushki Plugin cross site scripting
- MaxSite CMS
- Cross-site scripting (XSS)
- Code injection
- CVSS 4.8 Medium
MaxSite CMS Guestbook Plugin cross site scripting
- MaxSite CMS
- Cross-site scripting (XSS)
- Code injection
- CVSS 4.8 Medium
MaxSite CMS down_count Plugin cross site scripting
- MaxSite CMS
- Cross-site scripting (XSS)
- Code injection
- CVSS 4.8 Medium
MaxSite CMS mail_send Plugin cross site scripting
- MaxSite CMS
- Cross-site scripting (XSS)
- Code injection
- CVSS 4.8 Medium
MaxSite CMS Redirect Plugin cross site scripting
- MaxSite CMS
- Cross-site scripting (XSS)
- Code injection
- CVSS 4.8 Medium
MaxSite CMS Antispam Plugin plugin_antispam cross site scripting
- MaxSite CMS
- Cross-site scripting (XSS)
- Code injection
- CVSS 4.8 Medium
Datacom DM4100 Ethernet Configuration cross site scripting
- Datacom DM4100
- Cross-site scripting (XSS)
- Code injection
- CVSS 4.8 Medium
Datacom DM4100 VLAN Page cross site scripting
- Datacom DM4100
- Cross-site scripting (XSS)
- Code injection