41920 matches found
CVE-2026-83531 Apache Camel: Camel-Dynamic-Router Control Endpoint Compiles Predicate Expressions Supplied by Control Messages
Improper Control of Generation of Code 'Code Injection', Improper Neutralization of Special Elements used in an Expression Language Statement 'Expression Language Injection' vulnerability in Apache Camel. This issue affects Apache Camel: from 4.4.0 before 4.18.5, from 4.19.0 before 4.22.1. The...
CVE-2026-83531
Apache Camel's dynamic-router-control endpoint is vulnerable to Code Injection (CWE-94) and Expression Language Injection (CWE-917). The component improperly takes the subscription predicate and expression language name directly from incoming control messages (via predicate/expressionLanguage fie...
CVE-2026-83531 Apache Camel: Camel-Dynamic-Router Control Endpoint Compiles Predicate Expressions Supplied by Control Messages
Improper Control of Generation of Code 'Code Injection', Improper Neutralization of Special Elements used in an Expression Language Statement 'Expression Language Injection' vulnerability in Apache Camel. This issue affects Apache Camel: from 4.4.0 before 4.18.5, from 4.19.0 before 4.22.1. The...
CVE-2026-112102
A vulnerability was detected in AXA Group NLP.js 4.27.0. This impacts the function Evaluator.walkFunction of the file packages/evaluator/src/evaluator.js of the component Condition Expression Pipeline. The manipulation of the argument condition results in code injection. It is possible to launch...
CVE-2026-112100
A vulnerability was determined in DeepPavlov up to 1.7.0. This affects the function MultiTaskPipelinePreprocessor.init of the file deeppavlov/models/preprocessors/multitaskpreprocessor.py. This manipulation of the argument preprocessor causes code injection. The attack is possible to be carried o...
CVE-2026-110887
Improper Control of Generation of Code 'Code Injection' vulnerability in HivePress HivePress hivepress allows Remote Code Inclusion.This issue affects HivePress: from n/a through 1.7.32...
CVE-2026-112102 AXA Group NLP.js Condition Expression Pipeline evaluator.js Evaluator.walkFunction code injection
A vulnerability was detected in AXA Group NLP.js 4.27.0. This impacts the function Evaluator.walkFunction of the file packages/evaluator/src/evaluator.js of the component Condition Expression Pipeline. The manipulation of the argument condition results in code injection. It is possible to launch...
EUVD-2026-104166
A vulnerability was detected in AXA Group NLP.js 4.27.0. This impacts the function Evaluator.walkFunction of the file packages/evaluator/src/evaluator.js of the component Condition Expression Pipeline. The manipulation of the argument condition results in code injection. It is possible to launch...
CVE-2026-112102
A code injection vulnerability exists in AXA Group NLP.js 4.27.0 within the Condition Expression Pipeline component. The flaw is located in the Evaluator.walkFunction of the file packages/evaluator/src/evaluator.js, where manipulating the condition argument allows for remote code execution. The d...
CVE-2026-112102 AXA Group NLP.js Condition Expression Pipeline evaluator.js Evaluator.walkFunction code injection
A vulnerability was detected in AXA Group NLP.js 4.27.0. This impacts the function Evaluator.walkFunction of the file packages/evaluator/src/evaluator.js of the component Condition Expression Pipeline. The manipulation of the argument condition results in code injection. It is possible to launch...
CVE-2026-112098
A security flaw has been discovered in DeepPavlov up to 1.7.0. Impacted is the function resolve of the file deeppavlov/core/common/params.py of the component Config Reference Resolver. The manipulation results in code injection. The attack can be launched remotely. The exploit has been released t...
EUVD-2026-104138
A vulnerability was determined in DeepPavlov up to 1.7.0. This affects the function MultiTaskPipelinePreprocessor.init of the file deeppavlov/models/preprocessors/multitaskpreprocessor.py. This manipulation of the argument preprocessor causes code injection. The attack is possible to be carried o...
CVE-2026-112100 DeepPavlov multitask_preprocessor.py MultiTaskPipelinePreprocessor.__init__ code injection
A vulnerability was determined in DeepPavlov up to 1.7.0. This affects the function MultiTaskPipelinePreprocessor.init of the file deeppavlov/models/preprocessors/multitaskpreprocessor.py. This manipulation of the argument preprocessor causes code injection. The attack is possible to be carried o...
CVE-2026-112100 DeepPavlov multitask_preprocessor.py MultiTaskPipelinePreprocessor.__init__ code injection
A vulnerability was determined in DeepPavlov up to 1.7.0. This affects the function MultiTaskPipelinePreprocessor.init of the file deeppavlov/models/preprocessors/multitaskpreprocessor.py. This manipulation of the argument preprocessor causes code injection. The attack is possible to be carried o...
CVE-2026-112100
A code injection vulnerability exists in DeepPavlov up to version 1.7.0 . The flaw is located in the MultiTaskPipelinePreprocessor.__init__ function within the file deeppavlov/models/preprocessors/multitask_preprocessor.py. An attacker can perform a remote attack by manipulating the preprocessor ...
EUVD-2026-104137
Improper Control of Generation of Code 'Code Injection' vulnerability in HivePress HivePress hivepress allows Remote Code Inclusion.This issue affects HivePress: from n/a through 1.7.32...
CVE-2026-110887 WordPress HivePress plugin <= 1.7.32 - Remote Code Execution (RCE) vulnerability
Improper Control of Generation of Code 'Code Injection' vulnerability in HivePress HivePress hivepress allows Remote Code Inclusion.This issue affects HivePress: from n/a through 1.7.32...
CVE-2026-110887
The WordPress HivePress plugin (versions
CVE-2026-112098 DeepPavlov Config Reference Resolver params.py resolve code injection
A security flaw has been discovered in DeepPavlov up to 1.7.0. Impacted is the function resolve of the file deeppavlov/core/common/params.py of the component Config Reference Resolver. The manipulation results in code injection. The attack can be launched remotely. The exploit has been released t...
CVE-2026-112098 DeepPavlov Config Reference Resolver params.py resolve code injection
A security flaw has been discovered in DeepPavlov up to 1.7.0. Impacted is the function resolve of the file deeppavlov/core/common/params.py of the component Config Reference Resolver. The manipulation results in code injection. The attack can be launched remotely. The exploit has been released t...