Code injection.

BISHENG Authenticated Arbitrary Python Code Execution via Workflow run_once

• dataelement bisheng
• Code injection

Trestle has Server-Side Template Injection (SSTI) via Recursive Template Re-evaluation of Untrusted Data

• Code injection

<3.12.4 || >=4.0.0, <4.1.0 · fixed in 3.12.4, 4.1.0

PaperCut MF/NG: Unsafe Dynamic Class Loading in Database Connector

• PaperCut MF/NG
• Code injection

Budibase before 3.41.3 Remote Code Execution via Plugin eval()

• budibase server
• Code injection

LiteLLM vulnerable to server-side template injection in the /prompts/test endpoint

• Code injection

<1.83.7 · fixed in 1.83.7

RooCodeInc Roo-Code MCP Integration Trust Model malicious_mcp_server.py fetch_instructions code injection

• RooCodeInc Roo-Code
• Other injection
• Code injection

RooCodeInc Roo-Code README File ExecaTerminalProcess code injection

• RooCodeInc Roo-Code
• Other injection
• Code injection

RooCodeInc Roo-Code CodeIndexManager helpers.ts optimizeQuery code injection

• RooCodeInc Roo-Code
• Other injection
• Code injection

Trilium: Note Import to RCE via Book Note

• Trilium
• Cross-site scripting (XSS)
• Code injection

Trilium: Note Import to RCE via Mind Elixir dangerouslySetInnerHtml

• Trilium
• Cross-site scripting (XSS)
• Code injection

Unauthenticated Remote Code Execution in GraphQL Composite Data API

• ServiceNow AI Platform
• Code injection

Sandbox Escape in ServiceNow AI Platform

• ServiceNow AI Platform
• Code injection
• CWE-693

Trilium: Malicious import with GeoMap marker title XSS leads to RCE on the desktop client

• Trilium
• Cross-site scripting (XSS)
• Code injection

openssl_encrypt before 1.4.9 executes untrusted third-party plugins with insufficient controls: the plugin signature policy defaulted to WARN, so an unsigned/unverifiable non-built-in plugin was co...

• Code injection

<1.4.9 · fixed in 1.4.9

silverstripe-advancedworkflow vulnerable to remote code execution via advanced workflow email template

• Code injection
• CWE-20

<6.4.5 || >=7.0.0, <7.1.3 || >=7.2.0, <7.2.1 · fixed in 6.4.5, 7.1.3, 7.2.1

silverstripe/userforms vulnerable to remote code execution via userforms email subject

• Code injection
• CWE-20

<6.4.9 || >=7.0.0, <7.0.7 || >=7.1.0, <7.1.1 · fixed in 6.4.9, 7.0.7, 7.1.1

Trilium: RCE via `shareTemplate` relation missing `isDangerous` flag — Safe import bypass leading to EJS SSTI (Incomplete Fix of CVE-2026-45668)

• Trilium
• Code injection

ToolUniverse through 1.2.6 Unauthenticated Remote Code Execution via python_code_executor Sandbox Escape

• mims-harvard ToolUniverse
• Code injection

Flowintel Arbitrary Log File Path Allows Remote Code Execution via Template Injection

• flowintel
• Path traversal
• Code injection

Flowintel Alert Settings Configuration Allows Remote Code Execution via Arbitrary Configuration Keys

• flowintel
• Code injection
• CWE-20

Defender Security < 6.2.0 - Admin+ Network-Wide RCE via Hub Connector on Multisite

• Defender Security
• Code injection

Smush < 4.3.2 - Admin+ Network-Wide RCE via Hub Connector on Multisite

• Smush
• Code injection

An issue in Bilibili Desktop v.1.17.9 allows a remote attacker to execute arbitrary code via the bili-inject.js and bili-bridge.js components.

• Code injection

Agno up to and including 2.5.8 is vulnerable to Remote Code Execution (RCE) via prompt injection.

• Code injection

whichllm < 0.5.16 Code Injection via run and snippet commands

• Andyyyy64 whichllm
• Code injection

cakephp/debug_kit: MailPreview contains unsafe reflection

• Code injection

<4.10.3 || >=5.0.0, <5.2.4 · fixed in 4.10.3, 5.2.4

senaite.core Vulnerable to Eval Injection and Missing Authorization

• Code injection
• Broken access control

>=2.0.0, <=2.6.0 · no fixed version yet

Eval Injection in google/langfun via default lf.query protocol

• Google langfun
• Code injection
• CWE-1188

Pods < 3.3.9.1 - Author+ RCE via Shortcode Display Callback

• Pods
• Code injection

Code injection in SASAKI Nobuyuki CorvusSKK

• SASAKI Nobuyuki CorvusSKK
• Code injection

In AntFlow V2.0.0, ActivitiTest.java enables users to execute JUEL expressions without filtering the user input, which leads to a command execution vulnerability.

• Code injection

JeecgBoot v3.9.2 is vulnerable to Remote command execution.

• Code injection

A zero-click remote code execution (RCE) vulnerability in the /Terminal/Notification.hs component of SimpleX Chat before v6.5 allows attackers to execute arbitrary commands in the context of the appl…

• Code injection

code-projects Online Shopping System sumit_form.php cross site scripting

• code-projects Online Shopping System
• Cross-site scripting (XSS)
• Code injection

Code injection in NVIDIA NemoClaw

• NVIDIA NemoClaw
• Code injection

Code injection in Google Chrome

• Google Chrome
• Code injection

mcp-contextforge-gateway has Server-Side Template Injection (SSTI) leading to Remote Code Execution in `PromptService._render_template` via unsandboxed Jinja2 Environment

• Code injection

<1.0.0 · fixed in 1.0.0

qwed Vulnerable to Authenticated Remote Code Execution via Unsafe SymPy `parse_expr()`

• Code injection

<5.1.2 · fixed in 5.1.2

qwed-mcp has Unsafe SymPy `parse_expr()` Remote Code Execution via Unsanitized Math Expression Input

• Code injection

<0.2.1 · fixed in 0.2.1

Vocos through 0.1.0 Arbitrary Code Execution via Unrestricted class_path in Model Configuration

• gemelo-ai vocos
• Code injection

PraisonAI workflow include bypasses tools.py autoload opt-in and executes included recipe code

• Code injection
• CWE-426

>=3.9.26, <4.6.58 · fixed in 4.6.58

WatchGuard Agent path traversal allows unauthenticated remote code execution

• WatchGuard Agent
• Code injection
• Authentication bypass

Apache Hive: SQL Injection vulnerability in HiveMetaStore partition-name direct-SQL paths

• Apache Software Foundation Apache Hive
• Code injection

TYPO3-EXT-SA-2026-023: Server-Side Template Injection in extension "Event management and registration" (sf_event_mgt)

• Code injection

<5.9.3 || >=6.0.0, <6.7.2 || >=7.0.0, <7.9.3 || >=8.0.0, <8.6.2 || >=9.0.0, <9.0.3 · fixed in 5.9.3, 6.7.2, 7.9.3, 8.6.2, 9.0.3

TYPO3-EXT-SA-2026-022: Server-Side Template Injection in extension "powermail" (powermail)

• Code injection

<10.9.3 || >=11.0.0, <12.6.1 || >=13.0.0, <13.2.1 · fixed in 10.9.3, 12.6.1, 13.2.1

cleverbrush framework/deep deepExtend.ts deepExtend prototype pollution

• cleverbrush framework
• cleverbrush deep
• Code injection
• Prototype pollution

Grav before 4.2.2 Remote Code Execution via Email Twig

• grav
• Code injection

Adminer before 5.4.3 Remote Code Execution via SQLite VACUUM INTO

• vrana adminer
• Code injection

mcp-contextforge-gateway has RestrictedPython sandbox bypass via getattr builtin in python_sandbox_server

• Code injection
• CWE-693

<1.0.2 · fixed in 1.0.2

Combodo iTop: PHP Object Injection Leading to Remote Code Execution on user preferences

• Combodo iTop
• Code injection
• Insecure deserialization

Combodo iTop: Remote code execution using external auth variable value

• Combodo iTop
• Code injection

AzuraCast through 0.23.8 Liquidsoap Configuration Write via Profile Edit Serialization Group Bypass

• AzuraCast
• Code injection
• Broken access control

Rpm: rpmbuild gettarspec() crafted tar member name → macro injection

• Red Hat Enterprise Linux 10
• Red Hat Enterprise Linux 9
• Code injection

Xinference through 2.11.0 Remote Code Execution via Hardcoded trust_remote_code in Model Loaders

• xorbitsai inference
• Code injection

Piwigo Public Authentication cross site scripting

• Piwigo
• Cross-site scripting (XSS)
• Code injection

ractivejs ractive Keypath Ractive#set prototype pollution

• ractive
• Code injection
• Prototype pollution

Velociraptor Analyst overwrites live built-in artifacts through verify()

• Rapid7 Velociraptor
• Code injection
• Broken access control

alibaba-fusion next deepMerge index.tsx ConfigProvider.getContextProps prototype pollution

• alibaba-fusion next
• Code injection
• Prototype pollution

rexrainbow phaser3-rex-notes BehaviorTree Blackboard Data SetValue.js SetValue prototype pollution

• rexrainbow phaser3-rex-notes
• Code injection
• Prototype pollution

jQWidgets jqx-all.js jqxBaseFramework.extend prototype pollution

• jQWidgets
• Code injection
• Prototype pollution