Advisories · Weakness
CWE-627.
Every Advisory and CVE whose sources give the weakness CWE-627, newest first.
- CVSS 7.5 High
Emails sent by pretix can utilize placeholders that will be filled with customer data. For example, when {name}
- CWE-627
>=4.16.0, <2026.1.1 · fixed in 2026.1.1
GHSA-r8p8-qw9w-j9qv · CVE-2026-2415 - CVSS 7.5 High
Unsafe variable evaluation in email templates
- pretix-newsletter
- CWE-627
- CVSS 7.5 High
Unsafe variable evaluation in email templates
- pretix-doistep
- CWE-627
- CVSS 9.8 CriticalCritical · CVSS 9+, CVSS 7+ and EPSS
Flowise vulnerable to RCE via Dynamic function constructor injection
- Code injection
- CWE-627
<=2.2.7-patch.1 · no fixed version yet
GHSA-hmgh-466j-fx4c · CVE-2025-55346 - CVSS 7.2 High
Composio Eval Injection Vulnerability
- CWE-627
<0.5.43 · fixed in 0.5.43
GHSA-5xg7-5662-8x7j · CVE-2024-8953 - CVSS 2.8 Low
Dynamic Variable Evaluation in qiskit-ibm-runtime
- CWE-627
>=0.11.0, <0.11.1 · fixed in 0.11.1
GHSA-cq96-9974-v8hm - CVSS 7.5 High
CVE
- nvidia DGX A100
- CWE-627