Duplicate Advisory: Title Authenticated Remote Code Execution in validate_code via Malicious Decorators Description

Duplicate Advisory This advisory has been withdrawn because it is a duplicate of GHSA-w584-2h2r-2hvf. This link is maintained to preserve external references. Original Description langflow-ai langflow v1.9.3 is affected by: Code Injection. The impact is: execute arbitrary code remote. The compone...

EUVD-2026-91755

FinRobot 1.0.0 contains code injection in CodingUtils.createfilewithcode...

EUVD-2026-91756

FinRobot v1.0.0 is vulnerable to Code Injection in CodingUtils.modifycode...

EUVD-2026-91760

vanna v2.0.2 contains a code injection vulnerability in VannaBase.getplotlyfigure src/vanna/legacy/base/base.py. Depending on the exposed entry, an attacker can trigger attacker-controlled code or command execution...

PT-2026-104373

FinRobot 1.0.0 contains code injection in CodingUtils.create file with code...

CVE-2026-51918

FinRobot 1.0.0 contains code injection in CodingUtils.createfilewithcode...

CVE-2026-51922: Improper Control of Generation of Code

agentscope v1.0.20 contains code injection in executeshellcommand src/agentscope/tool/coding/shell.py. Depending on the exposed entry, an attacker can trigger attacker-controlled code or command execution...

CVE-2026-51922

agentscope v1.0.20 contains code injection in executeshellcommand src/agentscope/tool/coding/shell.py. Depending on the exposed entry, an attacker can trigger attacker-controlled code or command execution...

EUVD-2026-91754

agentscope v1.0.20 contains code injection in executeshellcommand src/agentscope/tool/coding/shell.py. Depending on the exposed entry, an attacker can trigger attacker-controlled code or command execution...

CVE-2026-51917

FinRobot v1.0.0 is vulnerable to Code Injection in CodingUtils.modifycode...

CVE-2026-51922

The agentscope v1.0.20 software is vulnerable to a code injection flaw in the execute_shell_command function located at src/agentscope/tool/_coding/_shell.py. An attacker can trigger the execution of attacker-controlled code or commands depending on the exposed entry point. While technical exploi...

CVE-2026-51917: Improper Control of Generation of Code

FinRobot v1.0.0 is vulnerable to Code Injection in CodingUtils.modifycode...

CVE-2026-51911: Improper Control of Generation of Code

vanna v2.0.2 contains a code injection vulnerability in VannaBase.getplotlyfigure src/vanna/legacy/base/base.py. Depending on the exposed entry, an attacker can trigger attacker-controlled code or command execution...

PT-2026-104374

Name of the Vulnerable Software and Affected Versions AgentScope version 1.0.20 Description Code injection exists in the execute shell command function located in src/agentscope/tool/ coding/ shell.py. Depending on the exposed entry, an attacker can trigger the execution of attacker-controlled co...

CVE-2026-51918

FinRobot 1.0.0 contains code injection in CodingUtils.createfilewithcode...

CVE-2026-51917

FinRobot v1.0.0 is vulnerable to Code Injection in CodingUtils.modifycode...

CVE-2026-51911

vanna v2.0.2 contains a code injection vulnerability in VannaBase.getplotlyfigure src/vanna/legacy/base/base.py. Depending on the exposed entry, an attacker can trigger attacker-controlled code or command execution...

PT-2026-104368

vanna v2.0.2 contains a code injection vulnerability in VannaBase.get plotly figure src/vanna/legacy/base/base.py. Depending on the exposed entry, an attacker can trigger attacker-controlled code or command execution...

CVE-2026-51922

agentscope v1.0.20 contains code injection in executeshellcommand src/agentscope/tool/coding/shell.py. Depending on the exposed entry, an attacker can trigger attacker-controlled code or command execution...

CVE-2026-51911

vanna v2.0.2 contains a code injection vulnerability in VannaBase.getplotlyfigure src/vanna/legacy/base/base.py. Depending on the exposed entry, an attacker can trigger attacker-controlled code or command execution...