agentprime: CWE-791Every new CWE-791 Advisory and CVE.https://agentprime.io/CVE-2026-123020: eosphoros-ai DB-GPT Jinja2 Template __init__.py FileBasedSkill.get_prompt special elements in template enginehttps://agentprime.io/advisories/CVE-2026-123020/https://agentprime.io/advisories/CVE-2026-123020/CVSS 5.3 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Thu, 05 Nov 2026 12:45:21 GMTCVECVE-2026-121446: svg-sanitizer 0.5.0 before 1.1.0 Incomplete url() Filtering in SVG Attributeshttps://agentprime.io/advisories/CVE-2026-121446/https://agentprime.io/advisories/CVE-2026-121446/CVSS 5.3 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Tue, 03 Nov 2026 14:28:35 GMTCVECVE-2026-108570: Furion .NET Framework View ViewEngine.cs RunCompile special elements in template enginehttps://agentprime.io/advisories/CVE-2026-108570/https://agentprime.io/advisories/CVE-2026-108570/CVSS 5.3 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Sun, 11 Oct 2026 10:30:14 GMTCVECVE-2026-103540: formtools.org Form Tools Client Settings Clients.class.php updateClientSettingsTab special elements in template enginehttps://agentprime.io/advisories/CVE-2026-103540/https://agentprime.io/advisories/CVE-2026-103540/CVSS 5.3 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Thu, 01 Oct 2026 05:15:13 GMTCVECVE-2026-102771: Naichen ThinkCMF Email Template MailController.php templatePut special elements in template enginehttps://agentprime.io/advisories/CVE-2026-102771/https://agentprime.io/advisories/CVE-2026-102771/CVSS 5.1 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Tue, 29 Sep 2026 22:00:14 GMTCVECVE-2026-86206: Access control filter bypass allows unauthorised access to APIshttps://agentprime.io/advisories/CVE-2026-86206/https://agentprime.io/advisories/CVE-2026-86206/CVSS 6.9 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Sat, 05 Sep 2026 19:17:50 GMTCVECVE-2026-78140: Dromara UJCMS web-file-template Endpoint WebFileTemplateController.java update special elements in template enginehttps://agentprime.io/advisories/CVE-2026-78140/https://agentprime.io/advisories/CVE-2026-78140/CVSS 5.1 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Sun, 23 Aug 2026 19:45:07 GMTCVECVE-2026-75979: xianrendzw EasyReport SQL Preview Endpoint DesignerController.java previewSqlText special elements in template enginehttps://agentprime.io/advisories/CVE-2026-75979/https://agentprime.io/advisories/CVE-2026-75979/CVSS 5.3 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Wed, 19 Aug 2026 00:45:08 GMTCVECVE-2026-19929: OpenBoxes Template Processing DocumentController.groovy buildZebraTemplate special elements in template enginehttps://agentprime.io/advisories/CVE-2026-19929/https://agentprime.io/advisories/CVE-2026-19929/CVSS 5.3 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Sun, 16 Aug 2026 03:00:12 GMTCVECVE-2026-18632: langgenius dify Jinja2 jinja2_transformer.py jinja2.Template special elements used in a template enginehttps://agentprime.io/advisories/CVE-2026-18632/https://agentprime.io/advisories/CVE-2026-18632/CVSS 5.3 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Mon, 03 Aug 2026 19:30:08 GMTCVEAngular's deprecated package has a Cross-Site Scripting issuehttps://agentprime.io/advisories/GHSA-7x27-g8rg-x87w/https://agentprime.io/advisories/GHSA-7x27-g8rg-x87w/angular >=1.2.0-rc.3, <=1.8.3, no fixed version yet. CVSS 7.6 (High). Published by the GitHub Advisory Database. Not analysed by agentprime yet.Wed, 24 Jun 2026 21:30:44 GMTnpmangularCVE-2026-48208: Denial-of-Service via SVG Rendering in Tickethttps://agentprime.io/advisories/CVE-2026-48208/https://agentprime.io/advisories/CVE-2026-48208/CVSS 6.5 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Mon, 01 Jun 2026 03:32:38 GMTCVECVE-2026-9498: Dromara lamp-cloud Message Template GroovyClassLoader.parseClass special elements used in a template enginehttps://agentprime.io/advisories/CVE-2026-9498/https://agentprime.io/advisories/CVE-2026-9498/CVSS 5.3 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Mon, 25 May 2026 20:00:18 GMTCVECamel-CXF and Camel-Knative Message Header are Vulnerable to Injection via Missing Inbound Filteringhttps://agentprime.io/advisories/GHSA-8364-hfqj-pwm6/https://agentprime.io/advisories/GHSA-8364-hfqj-pwm6/org.apache.camel:camel-cxf-rest >=3.18.0, <4.14.6 || >=4.15.0, <4.18.2, fixed in 4.14.6, 4.18.2. CVSS 9.8 (Critical). Critical: CVSS score 9.8: 9.0 or more. CVSS score 9.8 (7.0 or more) and EPSS 0.20 (0.1 or more): a high score and a real chance of exploitation in the next 30 days. Published by the GitHub Advisory Database. Not analysed by agentprime yet.Tue, 19 May 2026 15:31:31 GMTMavenorg.apache.camel:camel-cxf-restcriticalCVE-2026-8740: Sanluan PublicCMS templateResult API TemplateResultDirective.java execute special elements used in a template enginehttps://agentprime.io/advisories/CVE-2026-8740/https://agentprime.io/advisories/CVE-2026-8740/CVSS 5.3 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Sun, 17 May 2026 08:00:12 GMTCVEdssrf: every IPv6 category bypasses is_url_safehttps://agentprime.io/advisories/GHSA-8p33-q827-ghj5/https://agentprime.io/advisories/GHSA-8p33-q827-ghj5/dssrf <1.0.3, fixed in 1.0.3. CVSS 8.7 (High). Published by the GitHub Advisory Database. Not analysed by agentprime yet.Wed, 06 May 2026 18:13:32 GMTnpmdssrfCVE-2026-7164: pf can overflow the stack parsing crafted SCTP packetshttps://agentprime.io/advisories/CVE-2026-7164/https://agentprime.io/advisories/CVE-2026-7164/CVSS 7.5 (High). Published by the CVE Program. Not analysed by agentprime yet.Thu, 30 Apr 2026 07:23:52 GMTCVEnetfoil's optional seccomp sandboxing was not appliedhttps://agentprime.io/advisories/GHSA-vjgj-42f6-7997/https://agentprime.io/advisories/GHSA-vjgj-42f6-7997/github.com/tinfoil-factory/netfoil <0.2.1, fixed in 0.2.1. Published by the GitHub Advisory Database. Not analysed by agentprime yet.Wed, 29 Apr 2026 22:23:41 GMTGogithub.com/tinfoil-factory/netfoilAstrBot has Incomplete Filtering of Special Elementshttps://agentprime.io/advisories/GHSA-h3rr-9wqj-v3c6/https://agentprime.io/advisories/GHSA-h3rr-9wqj-v3c6/astrbot <=4.22.1, no fixed version yet. CVSS 5.1 (Medium). Published by the GitHub Advisory Database. Not analysed by agentprime yet.Sat, 25 Apr 2026 18:32:58 GMTPyPIastrbotCVE-2026-5987: Sanluan PublicCMS FreeMarker Template AbstractFreemarkerView.java AbstractFreemarkerView.doRender special elements used in a template enginehttps://agentprime.io/advisories/CVE-2026-5987/https://agentprime.io/advisories/CVE-2026-5987/CVSS 5.1 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Thu, 09 Apr 2026 22:45:14 GMTCVEPyBlade: SSTI/RCE via Bypassed AST Validation in sandbox.pyhttps://agentprime.io/advisories/GHSA-23jg-5f8m-gw8c/https://agentprime.io/advisories/GHSA-23jg-5f8m-gw8c/pyblade >=0.1.8-alpha, <=0.2.0-alpha, no fixed version yet. CVSS 5.3 (Medium). Published by the GitHub Advisory Database. Not analysed by agentprime yet.Sun, 05 Apr 2026 12:30:25 GMTPyPIpybladeCVE-2026-3725: 1024-lab/lab1024 SmartAdmin FreeMarker Template MailService.java freemarkerResolverContent special elements used in a template enginehttps://agentprime.io/advisories/CVE-2026-3725/https://agentprime.io/advisories/CVE-2026-3725/CVSS 5.3 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Sun, 08 Mar 2026 09:02:08 GMTCVECVE-2026-3714: OpenCart Incomplete Fix CVE-2024-36694 template.php save special elements used in a template enginehttps://agentprime.io/advisories/CVE-2026-3714/https://agentprime.io/advisories/CVE-2026-3714/CVSS 5.1 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Sun, 08 Mar 2026 06:32:06 GMTCVETechDocs Mkdocs Configuration Key Enables Arbitrary Code Executionhttps://agentprime.io/advisories/GHSA-928r-fm4v-mvrw/https://agentprime.io/advisories/GHSA-928r-fm4v-mvrw/@backstage/plugin-techdocs-node <1.14.3, fixed in 1.14.3. CVSS 7.7 (High). Published by the GitHub Advisory Database. Not analysed by agentprime yet.Thu, 05 Mar 2026 00:12:07 GMTnpm@backstage/plugin-techdocs-nodedatapizza-ai: Server-Side Template Injection in ChatPromptTemplate via Jinja2 Template Handlerhttps://agentprime.io/advisories/GHSA-q5xx-fxv3-xxqf/https://agentprime.io/advisories/GHSA-q5xx-fxv3-xxqf/datapizza-ai-core <=0.0.2, no fixed version yet. CVSS 5.1 (Medium). Published by the GitHub Advisory Database. Not analysed by agentprime yet.Mon, 23 Feb 2026 06:30:18 GMTPyPIdatapizza-ai-coreCVE-2025-14731: CTCMS Content Management System Frontend/Template Management CT_Parser.php special elements used in a template enginehttps://agentprime.io/advisories/CVE-2025-14731/https://agentprime.io/advisories/CVE-2025-14731/CVSS 5.3 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Mon, 15 Dec 2025 23:32:09 GMTCVECVE-2025-59303: HAProxy Kubernetes Ingress Controller: HAProxy Kubernetes Ingress Controller before 3.1.13…https://agentprime.io/advisories/CVE-2025-59303/https://agentprime.io/advisories/CVE-2025-59303/CVSS 6.4 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Wed, 08 Oct 2025 00:00:00 GMTCVECVE-2025-9094: ThingsBoard Add Gateway special elements used in a template enginehttps://agentprime.io/advisories/CVE-2025-9094/https://agentprime.io/advisories/CVE-2025-9094/CVSS 5.3 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Sun, 17 Aug 2025 22:32:05 GMTCVECVE-2025-6761: Kingdee Cloud-Starry-Sky Enterprise Edition Freemarker Engine DynamicForm 4 Action.class plugin.buildMobilePopHtml special elements used in a template enginehttps://agentprime.io/advisories/CVE-2025-6761/https://agentprime.io/advisories/CVE-2025-6761/CVSS 6.9 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Fri, 27 Jun 2025 10:31:09 GMTCVEpyspur Incomplete Filtering of Special Elements allowed by SingleLLMCallNode functionhttps://agentprime.io/advisories/GHSA-8gff-cf92-72pv/https://agentprime.io/advisories/GHSA-8gff-cf92-72pv/pyspur <=0.1.18, no fixed version yet. CVSS 5.3 (Medium). Published by the GitHub Advisory Database. Not analysed by agentprime yet.Mon, 23 Jun 2025 21:31:56 GMTPyPIpyspurAngularJS Incomplete Filtering of Special Elements vulnerabilityhttps://agentprime.io/advisories/GHSA-4p4w-6hg8-63wx/https://agentprime.io/advisories/GHSA-4p4w-6hg8-63wx/angular-sanitize >=1.3.1, <=1.8.3, no fixed version yet. CVSS 4.8 (Medium). Published by the GitHub Advisory Database. Not analysed by agentprime yet.Wed, 04 Jun 2025 18:30:58 GMTnpmangular-sanitizeCVE-2025-0324: The VAPIX Device Configuration framework allowed a privilege escalation, enabling a lower-privileged user to gain administrator privileges.https://agentprime.io/advisories/CVE-2025-0324/https://agentprime.io/advisories/CVE-2025-0324/CVSS 9.4 (Critical). Critical: CVSS score 9.4: 9.0 or more. Published by the CVE Program. Not analysed by agentprime yet.Mon, 02 Jun 2025 07:32:56 GMTCVEcriticalCVE-2025-5325: zhilink 智互联(深圳)科技有限公司 ADP Application Developer Platform 应用开发者平台 testService special elements used in a template enginehttps://agentprime.io/advisories/CVE-2025-5325/https://agentprime.io/advisories/CVE-2025-5325/CVSS 5.3 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Thu, 29 May 2025 19:31:04 GMTCVEAngularJS improperly sanitizes SVG elementshttps://agentprime.io/advisories/GHSA-j58c-ww9w-pwp5/https://agentprime.io/advisories/GHSA-j58c-ww9w-pwp5/angular <=1.8.3, no fixed version yet. CVSS 4.8 (Medium). Published by the GitHub Advisory Database. Not analysed by agentprime yet.Tue, 29 Apr 2025 18:30:59 GMTnpmangularCVE-2025-3841: wix-incubator jam Jinja2 Template jam.py special elements used in a template enginehttps://agentprime.io/advisories/CVE-2025-3841/https://agentprime.io/advisories/CVE-2025-3841/CVSS 4.8 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Mon, 21 Apr 2025 19:31:04 GMTCVECVE-2024-45481: Improper authentication in SSH of B&R APROLhttps://agentprime.io/advisories/CVE-2024-45481/https://agentprime.io/advisories/CVE-2024-45481/CVSS 8.5 (High). Published by the CVE Program. Not analysed by agentprime yet.Tue, 25 Mar 2025 04:52:06 GMTCVECVE-2025-2040: zhijiantianya ruoyi-vue-pro deploy special elements used in a template enginehttps://agentprime.io/advisories/CVE-2025-2040/https://agentprime.io/advisories/CVE-2025-2040/CVSS 5.3 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Thu, 06 Mar 2025 20:00:12 GMTCVECVE-2024-47590: Cross-Site Scripting (XSS) vulnerability in SAP Web Dispatcherhttps://agentprime.io/advisories/CVE-2024-47590/https://agentprime.io/advisories/CVE-2024-47590/CVSS 8.8 (High). Published by the CVE Program. Not analysed by agentprime yet.Tue, 12 Nov 2024 00:26:18 GMTCVEAngularJS allows attackers to bypass common image source restrictionshttps://agentprime.io/advisories/GHSA-mqm9-c95h-x2p6/https://agentprime.io/advisories/GHSA-mqm9-c95h-x2p6/angular <=1.8.3, no fixed version yet. CVSS 4.8 (Medium). Published by the GitHub Advisory Database. Not analysed by agentprime yet.Mon, 09 Sep 2024 15:30:41 GMTnpmangularCVE-2024-39283: Intel(R) TDX module software: Incomplete filtering of special elements in Intel(R) TDX module software before version…https://agentprime.io/advisories/CVE-2024-39283/https://agentprime.io/advisories/CVE-2024-39283/CVSS 8.5 (High). Published by the CVE Program. Not analysed by agentprime yet.Wed, 14 Aug 2024 13:45:39 GMTCVECVE-2024-27489: An issue in the DelFile() function of WMCMS v4.4 allows attackers to delete arbitrary files via a crafted POST request.https://agentprime.io/advisories/CVE-2024-27489/https://agentprime.io/advisories/CVE-2024-27489/CVSS 7.5 (High). Published by the CVE Program. Not analysed by agentprime yet.Fri, 19 Jul 2024 00:00:00 GMTCVEPrivateBin allows shortening of URLs for other domainshttps://agentprime.io/advisories/GHSA-mqqj-fx8h-437j/https://agentprime.io/advisories/GHSA-mqqj-fx8h-437j/privatebin/privatebin >=1.5.0, <1.7.4, fixed in 1.7.4. CVSS 5.3 (Medium). Published by the GitHub Advisory Database. Not analysed by agentprime yet.Wed, 10 Jul 2024 14:25:23 GMTPackagistprivatebin/privatebinCVE-2024-32162: CMSeasy 7.7.7.9 is vulnerable to Arbitrary file deletion.https://agentprime.io/advisories/CVE-2024-32162/https://agentprime.io/advisories/CVE-2024-32162/CVSS 4.3 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Wed, 17 Apr 2024 00:00:00 GMTCVECVE-2020-36827: The XAO::Web module before 1.84 for Perl mishandles < and > characters in JSON output during use of json-embed in Web::Action.https://agentprime.io/advisories/CVE-2020-36827/https://agentprime.io/advisories/CVE-2020-36827/CVSS 5.4 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Sun, 24 Mar 2024 00:00:00 GMTCVECVE-2023-31172: Incomplete Filtering of Special Elementshttps://agentprime.io/advisories/CVE-2023-31172/https://agentprime.io/advisories/CVE-2023-31172/CVSS 5.9 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Thu, 31 Aug 2023 15:30:49 GMTCVECVE-2023-1076: A flaw was found in the Linux Kernel.https://agentprime.io/advisories/CVE-2023-1076/https://agentprime.io/advisories/CVE-2023-1076/CVSS 5.5 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Mon, 27 Mar 2023 00:00:00 GMTCVECVE-2022-2132: A permissive list of allowed inputs flaw was found in DPDK.https://agentprime.io/advisories/CVE-2022-2132/https://agentprime.io/advisories/CVE-2022-2132/Published by the CVE Program. Not analysed by agentprime yet.Wed, 31 Aug 2022 15:32:58 GMTCVEPipenv's requirements.txt parsing allows malicious index url in commentshttps://agentprime.io/advisories/GHSA-qc9x-gjcv-465w/https://agentprime.io/advisories/GHSA-qc9x-gjcv-465w/pipenv >=2018.10.9, <2022.1.8, fixed in 2022.1.8. CVSS 8.0 (High). Published by the GitHub Advisory Database. Not analysed by agentprime yet.Wed, 12 Jan 2022 22:29:41 GMTPyPIpipenv