18614 matches found
CVE-2026-94448
When a JavaScript template literal contains consecutive expressions, the context tracking state was not properly reset upon entering a new expression. We now ensure that template-literal expression entries correctly reset context variables so all subsequent regular expression literals are...
CVE-2026-97030
A trusted template author may have previously written a valid template wherein the use of the 'yield' keyword would not be correctly escaped. We now ensure that valid keyword uses are escaped and non-keyword uses are not escaped...
CVE-2026-94448
When a JavaScript template literal contains consecutive expressions, the context tracking state was not properly reset upon entering a new expression. We now ensure that template-literal expression entries correctly reset context variables so all subsequent regular expression literals are...
CVE-2026-97030
The vulnerability in CVE-2026-97030 involves a trusted template author providing a valid template where the 'yield' keyword was not correctly escaped. This lack of proper escaping allows for potential Cross-Site Scripting (XSS) , as indicated by the CWE-79 classification. The issue has been addre...
CVE-2026-94448
When a JavaScript template literal contains consecutive expressions, the context tracking state was not properly reset upon entering a new expression. We now ensure that template-literal expression entries correctly reset context variables so all subsequent regular expression literals are...
CVE-2026-97030
A trusted template author may have previously written a valid template wherein the use of the 'yield' keyword would not be correctly escaped. We now ensure that valid keyword uses are escaped and non-keyword uses are not escaped...
CVE-2026-97030 Recognize yield as regexp preceder keyword in html/template
A trusted template author may have previously written a valid template wherein the use of the 'yield' keyword would not be correctly escaped. We now ensure that valid keyword uses are escaped and non-keyword uses are not escaped...
CVE-2026-94448
A vulnerability exists in the JavaScript engine where context tracking states are not properly reset when a template literal contains consecutive expressions. This flaw prevents subsequent regular expression literals from being accurately recognized and escaped. The issue is addressed by ensuring...
GO-2026-6599 Reset context tracking on consecutive template expressions in html/template
When a JavaScript template literal contains consecutive expressions, the context tracking state was not properly reset upon entering a new expression. We now ensure that template-literal expression entries correctly reset context variables so all subsequent regular expression literals are...
GO-2026-6600 Recognize yield as regexp preceder keyword in html/template
A trusted template author may have previously written a valid template wherein the use of the 'yield' keyword would not be correctly escaped. We now ensure that valid keyword uses are escaped and non-keyword uses are not escaped...
Server-Side Template Injection
Handlebars is vulnerable to Server-Side Template Injection SSTI. The vulnerability is due to improper enforcement of prototype-access restrictions in lookupProperty, which allows an attacker to bypass the deny list, access the Function constructor through a controlled template, and execute...
CVE-2024-25600-WordPress-Bricks-Builder-RCE-PoC
CVE-2024-25600 — WordPress Bricks Builder RCE PoC Unauthenticated remote code execution vulnerability in WordPress Bricks Builder id uid=33www-data gid=33www-data groups=33www-data References CVE-2024-25600 Bricks Builder Security Advisory Wordfence writeup Credits Discovery: Snicco / Calvin Alka...
html/template: golang: Go html/template: Cross-Site Scripting via pathological input
A flaw was found in the html/template component of Go golang. Pathological inputs could prematurely close an unescaped forward slash '/', allowing an attacker to inject arbitrary content. This could lead to Cross-Site Scripting XSS, where malicious scripts are executed in a user's browser,...
CVE-2026-107570
heap OOB write in convertfilefromto via a crafted Content-Type header allows attacker to OOB write when email is used as a template...
CVE-2026-107570
heap OOB write in convertfilefromto via a crafted Content-Type header allows attacker to OOB write when email is used as a template...
CVE-2024-32651-changedetection-RCE
CVE-2024-32651 changedetection 0.45.20 - Remote Code Execution RCE Server-Side Template Injection Exploit!! 1. Title Remote Code Execution via Server-Side Template Injection SSTI in Vulnerable Web Application 2. Description This exploit targets a web application vulnerable to Server-Side Template...
CVE-2025-52914
CVE-2025-52914 How does this detection method work? Versions are extracted from target hosts, specifically the SVRVER html response in the body, and then matches on versions prior to 9.3.1 and versions from 10.0.26 to 10.1.101 inclusive. How do I run this script? 1. Download Nuclei from here 2...
CVE-2026-107570
The mutt mail client is vulnerable to a heap out-of-bounds (OOB) write in the convert_file_from_to() function. This issue can be triggered by providing a crafted Content-Type header when an email is being used as a template. The vulnerability is characterized as a Use of Out-of-range Pointer Offs...
