CWE-94

Aeon load_human_activity_segmentation_datasets Code Injection Remote Code Execution Vulnerability. This vulnerability al

Aeon load_time_series_segmentation_benchmark Code Injection Remote Code Execution Vulnerability. This vulnerability allo

Hydra is a framework for elegantly configuring complex applications. Prior to 1.3.4, hydra.utils.instantiate() resolves

Compliance-trestle (Trestle) is a Python SDK and command-line tool for managing OSCAL compliance documents. In versions

Compliance-trestle (Trestle) is a Python SDK and command-line tool for managing OSCAL compliance documents. In versions

CorvusSKK contains a code injection vulnerability, which may lead to arbitrary code execution on the affected product.

openssl_encrypt before 1.4.9 executes untrusted third-party plugins with insufficient controls: the plugin signature pol

Backstage is an open framework for building developer portals, and @backstage/plugin-techdocs-node provides common node.

Improper Control of Generation of Code ('Code Injection') vulnerability in inpersttion Inpersttion For Theme err-our-tea

Metabase is an open-source data analytics platform. In versions prior to 0.57.13 and versions 0.58.x through 0.58.6, aut

Open WebUI is an extensible, feature-rich, and user-friendly self-hosted AI platform. Prior to 0.10.0, get_event_call de

An issue in Vim Project v9.2.0389 and earlier allows a local attacker to execute arbitrary code via the vms_fixfilename(

AutoGPT is a workflow automation platform for creating, deploying, and managing continuous artificial intelligence agent

pnpm is a package manager. Versions 6.25.0 through 10.26.2 have a Command Injection vulnerability when using environment

Improper Control of Generation of Code ('Code Injection') vulnerability in Beaver Builder Beaver Builder beaver-builder-

KeePass Password Safe versions before 2.44 contain a denial of service vulnerability in the help system's HTML handling.

changedetection.io is a free open source web page change detection tool. Prior to version 0.54.4, the changedetection.io

LibreChat RAG API, version 0.7.0, contains a log-injection vulnerability that allows attackers to forge log entries.

dynaconf is a configuration management tool for Python. Prior to version 3.2.13, Dynaconf is vulnerable to Server-Side T

ZEBRA is a Zcash node written entirely in Rust. Prior to zebrad version 4.3.0 and zebra-chain version 6.0.1, a vulnerabi

Improper control of generation of code ('code injection') in Microsoft Exchange Server allows an unauthorized attacker t

Improper Control of Generation of Code ('Code Injection') vulnerability in Monetizemore Advanced Ads allows Remote Code

IBM WebSphere Application Server and IBM WebSphere Application Server Liberty are vulnerable to remote code execution an

vLLM is an inference and serving engine for large language models (LLMs). Prior to 0.22.0, an assert-based security chec

JAIOTlink C492A-W6 Wi-Fi IP cameras running firmware 4.8.30.57701411 contain a remote code execution vulnerability that

Kiota is an OpenAPI based HTTP Client code generator. Prior to 1.29.1 and 1.32.0, Kiota's Ruby generator embedded OpenAP

Kiota is an OpenAPI based HTTP Client code generator. Prior to 1.29.1 and 1.32.0, Kiota's Python generator let attacker-

datamodel-code-generator prior to version 0.70.0 contains a code injection vulnerability that allows attackers who contr

Artica Proxy before 4.50.000000 Service Pack 7 (fixed in hotfix 20260724-02) contains a session fixation vulnerability t

datamodel-code-generator generates Pydantic v2 models, dataclasses, TypedDict, and msgspec.Struct from OpenAPI, JSON Sch

Banks generates meaningful LLM prompts using a simple template language. In versions prior to 2.4.3, banks parses Tool J

In Eclipse Mojarra versions 2.3 and following, URL handing in `DefaultFaceletFactory` does not properly sanitize and/or

An attacker can send a notify request that causes a new secondary domain to be added to the bind backend, but causes sai

Skim is a fuzzy finder designed to through files, lines, and commands. The generate-files job in .github/workflows/pr.ym

A security flaw has been discovered in GL.iNet A1300, AX1800, AXT1800, BE1400, BE3600, BE6500, BE9300, BE10000, E5800, M

The The BuddyPress plugin for WordPress is vulnerable to arbitrary shortcode execution in all versions up to, and includ

Improper Control of Generation of Code ('Code Injection') vulnerability in Apache Avro Java SDK when generating specific

A flaw has been found in MaxSite CMS up to 109.1. This impacts the function eval of the file application/maxsite/admin/p

A security flaw has been discovered in eosphoros-ai db-gpt 0.7.5. Affected is the function importlib.machinery.SourceFil

The ReviewX – WooCommerce Product Reviews with Multi-Criteria, Reminder Emails, Google Reviews, Schema & More plugin for

A vulnerability was detected in letta-ai letta 0.16.4. This issue affects the function resolve_type of the file letta/fu

A weakness has been identified in Sinaptik AI PandasAI up to 3.0.0. This vulnerability affects the function CodeExecutor

A vulnerability was identified in provectus kafka-ui up to 0.7.2. This impacts the function validateAccess of the file /

A vulnerability has been found in Fosowl agenticSeek 0.1.0. Impacted is the function PyInterpreter.execute of the file s

A vulnerability has been found in assafelovic gpt-researcher up to 3.4.3. This affects the function extract_command_data

A security flaw has been discovered in PowerJob 5.1.0/5.1.1/5.1.2. The affected element is the function GroovyEvaluator.

A vulnerability was detected in FoundationAgents MetaGPT up to 0.8.1. This affects the function check_solution of the co

A flaw has been found in FoundationAgents MetaGPT up to 0.8.1. This vulnerability affects the function ActionNode.xml_fi

A vulnerability was identified in FoundationAgents MetaGPT up to 0.8.1. This affects the function generate_thoughts of t

A vulnerability was determined in brikcss merge up to 1.3.0. This affects an unknown part. Executing a manipulation of t