Code injection.

PraisonAI: Plugin Auto-Discovery Executes Arbitrary Python Files Without Verification

• Code injection
• CWE-427

<1.6.78 · fixed in 1.6.78

PraisonAI: CodeAgent Executes LLM-Generated Code Without Sandboxing and Leaks All Environment Secrets

• Code injection
• Information disclosure

<1.6.78 · fixed in 1.6.78

Eval injection in Brocade Active Support Connectivity Gateway

• Brocade Active Support Connectivity Gateway
• Code injection

Ghost: Remote Code Execution via Bookmark Card Images

• Code injection
• CWE-1395

>=6.56.0, <6.67.0 · fixed in 6.67.0

Payload: Remote Code Execution through first-register

• Code injection
• Prototype pollution

<3.90.0 || >=4.0.0-canary.0, <4.0.0-canary.34 · fixed in 3.90.0, 4.0.0-canary.34

Payload Form Builder has an RCE issue

• Code injection
• Prototype pollution

<3.90.0 || >=4.0.0-canary.0, <4.0.0-canary.34 · fixed in 3.90.0, 4.0.0-canary.34

Ghost: Remote Code Execution via Theme Translation Files

• Path traversal
• Code injection

>=6.10.3, <6.64.0 · fixed in 6.64.0

Hydra: Optuna custom_search_space can resolve and execute untrusted callables via get_method

• Code injection

>=1.2.0, <1.3.0 || >=1.4.0.dev4, <1.4.0.dev10 · fixed in 1.3.0, 1.4.0.dev10

Hydra: Mutable instantiate policy sets allow target blocklist bypass

• Code injection
• CWE-693

>=1.3.4, <1.3.7 || >=1.4.0.dev4, <1.4.0.dev10 · fixed in 1.3.7, 1.4.0.dev10

Hydra logging configuration permits unsafe callable resolution

• Code injection

<1.3.6 || >=1.4.0.dev0, <1.4.0.dev9 · fixed in 1.3.6, 1.4.0.dev9

Backstage: Remote code execution via crafted markdown_extensions in TechDocs mkdocs.yml

• Code injection
• CWE-183

<1.15.4 · fixed in 1.15.4

Backstage: Improper validation of MkDocs theme configuration in TechDocs

• Code injection

<1.15.4 · fixed in 1.15.4

Flowise Prompt Injection to RCE and SSRF via CSV/Airtable Agent Python Validator Bypass

• Code injection

<3.1.3 · fixed in 3.1.3

Cisco License On-Prem Security Hardening Release

• Cisco License On-Prem
• Code injection

PraisonAI: Code Injection via f-string Interpolation in Deploy API Server Generation

• Code injection

<4.6.78 · fixed in 4.6.78

Apache Jackrabbit: DavEx client runs Class.forName + (String)-constructor on server-controlled error bodies

• Apache Software Foundation Apache Jackrabbit
• Code injection

ImageMagick: Code Injection in the postscript coders

• ImageMagick
• Code injection

Code injection in Six Apart Ltd. Movable Type Cloud Edition and others

• Six Apart Ltd. Movable Type Cloud Edition
• Six Apart Ltd. Movable Type
• Code injection

WP Coder 4.0 - 4.5.1 - Editor+ RCE via Global PHP

• WP Coder
• Code injection

Langflow OSS is affected by multiple vulnerabilities

• IBM Langflow OSS
• Code injection

Langflow OSS is affected by multiple vulnerabilities

• IBM Langflow OSS
• Code injection

Langflow OSS is affected by multiple vulnerabilities

• IBM Langflow OSS
• Code injection

Langflow OSS is affected by multiple vulnerabilities

• IBM Langflow OSS
• Code injection

Langflow OSS is affected by multiple vulnerabilities

• IBM Langflow OSS
• Code injection

Langflow OSS is affected by multiple vulnerabilities

• IBM Langflow OSS
• Code injection

Langflow OSS is affected by multiple vulnerabilities

• IBM Langflow OSS
• Code injection

Langflow OSS is affected by multiple vulnerabilities

• IBM Langflow OSS
• Code injection

Langflow OSS is affected by multiple vulnerabilities

• IBM Langflow OSS
• Code injection

Langflow OSS is affected by multiple vulnerabilities

• IBM Langflow OSS
• Code injection

Code injection via unencoded configuration values during Python code generation in Bedrock AgentCore Starter Toolkit agent import

• aws bedrock-agentcore-starter-toolkit
• Code injection

Authenticated Remote Code Execution Vulnerabilities in HPE Networking ClearPass Policy Manager

• Hewlett Packard Enterprise (HPE) ClearPass Policy Manager (CPPM)
• Code injection

knowns OS Command Injection via Insecure LSP Binary Path Config in .knowns/config.json

• Command injection
• Code injection

<0.30.0 · fixed in 0.30.0

Code injection in Google Chrome

• Google Chrome
• Code injection

Code injection in Google Chrome

• Google Chrome
• Code injection

Kiota: Code injection through doc-comment delimiter reformation in Kiota Java and PHP generators

• Code injection

>=0.5.0, <1.35.0 · fixed in 1.35.0

openapi-python-client: Malicious OpenAPI Documents can cause Arbitrary Code Generation

• Code injection
• CWE-116

<0.29.1 · fixed in 0.29.1

getformwork URI Sanitizer DomSanitizer.php sanitizeNodeAttribute cross site scripting

• formwork
• Cross-site scripting (XSS)
• Code injection

Template injection in Dell Container Storage Modules

• Dell Container Storage Modules
• Code injection

Langflow: PythonREPLComponent executes unsandboxed Python code, enabling authenticated RCE and privilege escalation

• Code injection
• Privilege escalation

<1.10.1 · fixed in 1.10.1

Smarty before 4.5.8 and 5.x before 5.8.5 PHP Code Injection via extends: Inheritance Cache

• smarty
• Code injection

Authenticated RCE via render-components Entry Type overrides

• cms
• Code injection

WordPress Tabs plugin <= 2.5 - Remote Code Execution (RCE) vulnerability

• wpshopmart Tabs
• Code injection

WordPress WooCommerce Designer Pro plugin <= 1.9.33 - Remote Code Execution (RCE) vulnerability

• JMAPlugins WooCommerce Designer Pro
• Code injection

SourceCodester Simple Student Information System Profile Field register.php cross site scripting

• SourceCodester Simple Student Information System
• Cross-site scripting (XSS)
• Code injection

SourceCodester Simple Student Information System searchresults.php clean cross site scripting

• SourceCodester Simple Student Information System
• Cross-site scripting (XSS)
• Code injection

imgproxy SVG svg.go sanitizeElement cross site scripting

• imgproxy
• Cross-site scripting (XSS)
• Code injection

SourceCodester Drug Recommendation System add_drug.php cross site scripting

• SourceCodester Drug Recommendation System
• Cross-site scripting (XSS)
• Code injection

Immich: Authenticated SVG upload reaches ImageMagick coders and enables RCE

• immich
• Code injection

fsspec: Server-Side Template Injection in ReferenceFileSystem leads to Remote Code Execution

• Code injection

>=0.9.0, <2026.6.0 · fixed in 2026.6.0

Tinypool: Prototype Pollution Gadget to RCE in run() options

• Code injection
• Prototype pollution

<2.1.2 · fixed in 2.1.2

Langflow: Title Authenticated Remote Code Execution in validate_code via Malicious Decorators Description

• Code injection

>=1.7.2, <1.10.1 · fixed in 1.10.1

Langflow: Prompt injection in Langflow Smart Transform can lead to code execution

• Other injection
• Code injection

>=1.3.0, <1.10.3 · fixed in 1.10.3

Apache Struts: OGNL injection in the legacy RESTful action mapper

• Apache Software Foundation Apache Struts
• Code injection

auto-changelog: code execution via untrusted in-repository configuration (handlebarsSetup/plugins), plus argument injection, path traversal, and SSRF

• cookpete auto-changelog
• Path traversal
• Command injection

TallCMS PluginManager ThemeManager.php code injection

• TallCMS
• Other injection
• Code injection

feelec-yishu feelcrm-os Department Search Endpoint GroupController.class.php index cross site scripting

• feelec-yishu feelcrm-os
• Cross-site scripting (XSS)
• Code injection

feelec-yishu feelcrm-os Create Customer Endpoint CrmDefineFormModel.class.php htmlspecialchars_decode cross site scripting

• feelec-yishu feelcrm-os
• Cross-site scripting (XSS)
• Code injection

feelec-yishu feelcrm-os Crm Endpoint functions.php index cross site scripting

• feelec-yishu feelcrm-os
• Cross-site scripting (XSS)
• Code injection

WordPress Unlimited Elements For Elementor (Free Widgets, Addons, Templates) plugin <= 2.0.22 - Broken Access Control vulnerability

• Unlimited Elements For Elementor (Free Widgets, Addons, Templates)
• Code injection

Mitel MiVoice Office 400 Music on Hold WAV File Upload Code Execution

• Mitel MiVoice Office 400
• Code injection
• Unrestricted file upload