Advisories · Weakness
Code injection.
Untrusted input evaluated as code: eval, templates, expression languages. Every Advisory and CVE whose weakness (CWE) is one of these, newest first.
- CVSS 9.8 CriticalCritical · CVSS 9+
MCP Calculate Server: Prompt Injection to RCE
- 611711Dark mcp_calculate_server
- Code injection
- CWE-1427
- CVSS 6.5 Medium
Oinone Pamirs 7.0.0 contains a code execution vulnerability via ScriptRunner.
- Code injection
- CVSS 6.3 Medium
ORSEE (Online Recruitment System for Economic Experiments) 3.1.0 contains an authenticated Remote Code Execution vulnerability in the participant profile field processing subsystem.
- Code injection
- CVSS 9.3 CriticalCritical · CVSS 9+
Crabbox: environment variable exposure vulnerability
- Code injection
<0.12.0 · fixed in 0.12.0
GHSA-fm77-94qm-4894 · CVE-2026-8634 - CVSS 9.3 CriticalCritical · CVSS 9+
Electerm Local code through electerm's single-instance socket
- Code injection
- Broken access control
>=3.0.6, <3.9.0 · fixed in 3.9.0
GHSA-7p5m-v798-f8vv · CVE-2026-45353 - CVSS 9.6 CriticalCritical · CVSS 9+
DeepSeek TUI: task_create Insecure Defaults Enable RCE via Prompt Injection in Project Files
- Code injection
<0.8.26 · fixed in 0.8.26
GHSA-72w5-pf8h-xfp4 · CVE-2026-45374 - CVSS 9.6 CriticalCritical · CVSS 9+
DeepSeek TUI: run_tests Tool Enables RCE via Malicious Repository Without Approval
- Code injection
>=0.3.0, <0.8.23 · fixed in 0.8.23
GHSA-wx44-2q6h-j6p8 · CVE-2026-45311 - CVSS 9.4 CriticalCritical · CVSS 9+
Electerm: Importing unsafe bookmark data could lead to unsafe operation when clicking local type bookmark
- Code injection
- Broken access control
<=3.8.8 · no fixed version yet
GHSA-jgg9-rw32-44pj · CVE-2026-45058 - CVSS 5.4 Medium
Code injection in Google Chrome
- Google Chrome
- Code injection
- CVSS 8.3 High
SiYuan: Bazaar marketplace renders unescaped package author metadata, allowing XSS and Electron code execution
- siyuan
- Cross-site scripting (XSS)
- Code injection
- CVSS 8.8 High
RCE in Yordam Informatics' Library Automation System
- Yordam Information Technology Consulting, Training and Electronic Systems Industry and Trade Inc. Library Automation System
- Code injection
- CVSS 9.4 CriticalCritical · CVSS 9+, CVSS 7+ and EPSS
FlowiseAI: Authenticated Host RCE via POST /api/v1/node-custom-function and NodeVM Sandbox Escape
- Code injection
<3.1.2 · fixed in 3.1.2
GHSA-9rvc-vf7m-pgm2 · CVE-2026-46442 - CVSS 9.6 CriticalCritical · CVSS 9+
soundcloud-rpc: Remote Code Execution via XSS in Track Title
- richardhbtz soundcloud-rpc
- Cross-site scripting (XSS)
- Code injection
- CVSS 8.2 High
CoreShop Vulnerable to Remote Code Execution (RCE) via Insecure `pull_request_target` Configuration
- Code injection
=5.0.0 · no fixed version yet
GHSA-q58j-g3f4-h26h · CVE-2026-41249 - CVSS 9.2 CriticalCritical · CVSS 9+
Amazon Redshift Vulnerable to Remote Code Execution via Unsafe Class Loading
- Code injection
<2.2.2 · fixed in 2.2.2
GHSA-wmmv-vvg5-993q · CVE-2026-8178 - CVSS 5.4 Medium
Improper Control of Generation of Code ('Code Injection') in GitLab
- GitLab
- Code injection
- CVSS 6.3 Medium
Remote Code Execution in coleam00 Archon 0.1.0.
- Code injection
- CVSS 7.2 High
CubeCart: Authenticated RCE via Invoice Template → Order Print
- cubecart v6
- Code injection
- CVSS 9.1 CriticalCritical · CVSS 9+
CubeCart: Server-Side Template Injection (SSTI) in Smarty Templates leading to RCE
- cubecart v6
- Code injection
- CVSS 9.1 CriticalCritical · CVSS 9+
CubeCart: Server-Side Template Injection (SSTI) in Smarty Templates leading to RCE
- cubecart v6
- Code injection
- CVSS 7.3 High
Prisma Browser: Code Injection Enables Security Controls Bypass
- Palo Alto Networks Prisma Browser
- Code injection
- CVSS 8.6 High
claude-code-cache-fix vulnerable to local code execution via Python triple-quote injection in tools/quota-statusline.sh
- Command injection
- Code injection
>=3.5.0, <3.5.2 · fixed in 3.5.2
GHSA-g3xq-3gmv-qq8g · CVE-2026-45136 - CVSS 9.3 CriticalCritical · CVSS 9+
Mapfish Print: Remote Code Injection (RCE) in Dynamic table
- Code injection
>=3.23.0, <3.28.28 || >=3.29.0, <3.30.30 || >=3.31.0, <3.31.21 || >=3.32.0, <3.33.14 || >=3.34.0, <4.0.3 · fixed in 3.28.28, 3.30.30, 3.31.21, 3.33.14, 4.0.3
GHSA-q7m6-wpvf-mvwx · CVE-2026-44672 - CVSS 10.0 CriticalCritical · CVSS 9+
ChurchCRM: Incomplete fix for CVE-2026-39337: Unauthenticated RCE in Setup Wizard via unsanitized DB_PASSWORD
- CRM
- Code injection
- CVSS 7.2 High
Code injection in Claris FileMaker Cloud
- Claris FileMaker Cloud
- Code injection
- CVSS 6.5 Medium
Advanced Custom Fields: Extended <= 0.9.2.3 - Unauthenticated Arbitrary Shortcode Execution
- hwk-fr Advanced Custom Fields: Extended
- Code injection
- CVSS 8.6 High
Wing FTP Server < 8.1.3 Authenticated Remote Code Execution via Session Serialization
- Wing FTP Server
- Code injection
- CVSS 9.2 CriticalCritical · CVSS 9+
SPIP < 4.4.14 Remote Code Execution via nginx
- SPIP
- Code injection
- CVSS 8.7 High
SPIP < 4.4.14 Remote Code Execution via Private Space
- SPIP
- Code injection
- CVSS 9.8 CriticalCritical · CVSS 9+
Guardrails AI contains a code injection vulnerability in its Hub package installation mechanism
- Code injection
<=0.6.7 · no fixed version yet
GHSA-r6hf-g5x6-7pv9 · CVE-2026-31233 - CVSS 9.8 CriticalCritical · CVSS 9+
Open Source Kubectl MCP Server vulnerable to arbitrary code execution via user interaction with crafted HTML page
- Code injection
<1.2.0 · fixed in 1.2.0
GHSA-94gr-w3q5-rfqr · CVE-2025-65719 - CVSS 8.8 High
Superduper: Remote code execution via unsafe eval in superduper query parsing
- Code injection
<=0.10.0 · no fixed version yet
GHSA-2799-6g5r-mmc7 · CVE-2026-31225 - CVSS 8.8 High
AntSword: Incomplete noxss() sanitization leads to 1-click RCE via jquery.terminal format code injection
- antSword
- Cross-site scripting (XSS)
- Code injection
- CVSS 9.9 CriticalCritical · CVSS 9+
Microsoft Dynamics 365 On-Premises Remote Code Execution Vulnerability
- Microsoft Dynamics 365 (on-premises) version 9.1
- Code injection
- CVSS 8.8 High
Microsoft Data Formulator Remote Code Execution Vulnerability
- Microsoft Data Formulator
- Code injection
- CVSS 8.7 High
protobuf.js: Code injection in pbjs static output from crafted schema names
- Code injection
<1.2.1 || >=2.0.0, <2.0.2 · fixed in 1.2.1, 2.0.2
GHSA-6r35-46g8-jcw9 · CVE-2026-44295 - CVSS 7.7 High
protobuf.js: Code injection through bytes field defaults in generated toObject code
- Code injection
<7.5.6 || >=8.0.0, <8.0.2 · fixed in 7.5.6, 8.0.2
GHSA-66ff-xgx4-vchm · CVE-2026-44293 - CVSS 8.1 High
protobuf.js: Code generation gadget after prototype pollution
- Code injection
- Prototype pollution
<7.5.6 || >=8.0.0, <8.0.2 · fixed in 7.5.6, 8.0.2
GHSA-75px-5xx7-5xc7 · CVE-2026-44291 - CVSS 8.2 High
Spring AI: Prompt Injection via Memory Poisoning in PromptChatMemoryAdvisor
- Code injection
<1.0.7 || >=1.1.0-M1, <1.1.6 · fixed in 1.0.7, 1.1.6
GHSA-5852-phmh-8fhr · CVE-2026-41713 - CVSS 4.3 Medium
Code Injection vulnerability in SAP Application Server ABAP for SAP NetWeaver and ABAP Platform
- SAP_SE SAP Application Server ABAP for SAP NetWeaver and ABAP Platform
- Code injection
- CVSS 9.8 CriticalCritical · CVSS 9+
Cognee thru v0.4.0 contains a critical remote code execution vulnerability in its notebook cell execution API endpoint.
- Code injection
- CVSS 9.8 CriticalCritical · CVSS 9+
The Adversarial Robustness Toolbox (ART) thru 1.20.1 contains a command-line argument injection vulnerability in its Kubeflow component (robustness_evaluation_fgsm_pytorch.py).
- Command injection
- Code injection
- CVSS 9.8 CriticalCritical · CVSS 9+
The Adversarial Robustness Toolbox (ART) thru 1.20.1 contains a remote code execution vulnerability in its Kubeflow component.
- Code injection
- CVSS 9.8 CriticalCritical · CVSS 9+
The _load_model() function in the neural_magic_training.py script of the optimate project in commit a6d302f912b481c94370811af6b11402f51d377f (2024-07-21) allows arbitrary code execution.
- Code injection
- CVSS 10.0 CriticalCritical · CVSS 9+
SandboxJS has a sandbox escape via Function.caller leakage of internal call op
- Code injection
<0.9.6 · fixed in 0.9.6
GHSA-g8f2-4f4f-5jqw · CVE-2026-43898 - CVSS 5.3 Medium
Mermaid: Improper sanitization of configuration leads to CSS injection
- Code injection
<10.9.6 || >=11.0.0-alpha.1, <11.15.0 · fixed in 10.9.6, 11.15.0
GHSA-87f9-hvmw-gh4p · CVE-2026-41159 - CVSS 5.3 Medium
Mermaid: Improper sanitization of `classDef` in state diagrams leads to HTML injection
- Code injection
<10.9.6 || >=11.0.0-alpha.1, <11.15.0 · fixed in 10.9.6, 11.15.0
GHSA-ghcm-xqfw-q4vr · CVE-2026-41149 - CVSS 5.3 Medium
Mermaid: Improper sanitization of `classDefs` in diagrams leads to CSS injection
- Code injection
<10.9.6 || >=11.0.0-alpha.1, <11.15.0 · fixed in 10.9.6, 11.15.0
GHSA-xcj9-5m2h-648r · CVE-2026-41148 - CVSS 7.3 High
flash-attention contains an insecure deserialization vulnerability in its checkpoint loading mechanism
- Code injection
- Insecure deserialization
<=2.8.3 · no fixed version yet
GHSA-7g5w-pq96-8c5w · CVE-2026-31253 - CVSS 9.3 CriticalCritical · CVSS 9+
Angular Expressions - Remote Code Execution using filters
- Code injection
<1.5.2 · fixed in 1.5.2
GHSA-pw8r-6689-xvf4 · CVE-2026-44643 - CVSS 8.8 HighCritical · CVSS 7+ and EPSS
LiteLLM has a sandbox escape in custom-code guardrail
- Code injection
- CWE-420
>=1.81.8, <1.83.10 · fixed in 1.83.10
GHSA-wxxx-gvqv-xp7p · CVE-2026-40217 - CVSS 8.7 High
Local Path Provisioner Vulnerable to HelperPod Template Injection
- Privilege escalation
- Code injection
<0.0.36 · fixed in 0.0.36
GHSA-7fxv-8wr2-mfc4 · CVE-2026-44543 - CVSS 8.8 High
OWASP BLT: pre-commit-fix.yaml executes untrusted fork code via pull_request_target
- BLT
- Code injection
- CVSS 8.8 High
Dockerfile command injection via envs[*].name in bentofile.yaml (sibling fix-bypass of CVE-2026-33744 and CVE-2026-35043)
- Command injection
- Code injection
<1.4.39 · fixed in 1.4.39
GHSA-w2pm-x38x-jp44 · CVE-2026-44346 - CVSS 8.6 High
PraisonAI has unsafe tool resolution in `ToolExecutionMixin.execute_tool`: undeclared `__main__` callables execute
- Code injection
<4.6.37 · fixed in 4.6.37
GHSA-gmjg-hv98-qggq · CVE-2026-44339 - CVSS 4.8 Medium
Devs Palace ERP Online chart-save cross site scripting
- Devs Palace ERP Online
- Cross-site scripting (XSS)
- Code injection
- CVSS 4.8 Medium
Devs Palace ERP Online mr-save cross site scripting
- Devs Palace ERP Online
- Cross-site scripting (XSS)
- Code injection
- CVSS 4.8 Medium
Devs Palace ERP Online add_new_customer cross site scripting
- Devs Palace ERP Online
- Cross-site scripting (XSS)
- Code injection
- CVSS 7.3 High
An issue in QuickJS-NG v.0.12.1 allows an attacker to execute arbitrary code via the js_mapped_arguments_mark function
- Code injection
- CVSS 7.3 High
The flash-attention project thru commit e724e2588cbe754beb97cf7c011b5e7e34119e62 (2025-13-04) contains a code injection vulnerability (CWE-94) in its training script.
- Code injection