CVE-2026-33154

Dynaconf SSTI Vulnerability Report Summary Dynaconf is vulnerable to Server-Side Template Injection SSTI due to unsafe template evaluation in the @Jinja resolver. When the jinja2 package is installed, Dynaconf evaluates template expressions embedded in configuration values without a sandboxed...

EUVD-2026-110039

vLLM: Responses API bypasses trustrequestchattemplate for chattemplatekwargs...

vLLM: Responses API bypasses trust_request_chat_template for chat_template_kwargs

Summary vLLM's /v1/responses endpoint accepts request-level chattemplatekwargs, but does not apply the --trust-request-chat-template gate that protects Chat Completions, render, tokenize, and pooling paths. When the server is run with the documented default trustrequestchattemplate=False and no...

GHSA-X567-49G5-P4CF vLLM: Responses API bypasses trust_request_chat_template for chat_template_kwargs

Summary vLLM's /v1/responses endpoint accepts request-level chattemplatekwargs, but does not apply the --trust-request-chat-template gate that protects Chat Completions, render, tokenize, and pooling paths. When the server is run with the documented default trustrequestchattemplate=False and no...

SUSE CVE-2026-115918

vLLM is an inference and serving engine for large language models. From 0.16.0 until 0.32.0, the /v1/responses endpoint allows an authenticated caller to place an attacker-controlled template in chattemplatekwargschattemplate when no server template is configured...

CVE-2026-115918

vLLM is an inference and serving engine for large language models. From 0.16.0 until 0.32.0, the /v1/responses endpoint allows an authenticated caller to place an attacker-controlled template in chattemplatekwargschattemplate when no server template is configured...

CVE-2026-115918 vLLM: Responses API bypasses trust_request_chat_template for chat_template_kwargs

vLLM is an inference and serving engine for large language models. From 0.16.0 until 0.32.0, the /v1/responses endpoint allows an authenticated caller to place an attacker-controlled template in chattemplatekwargschattemplate when no server template is configured...

CVE-2026-115918

vLLM is an inference and serving engine for large language models. From 0.16.0 until 0.32.0, the /v1/responses endpoint allows an authenticated caller to place an attacker-controlled template in chattemplatekwargschattemplate when no server template is configured...

CVE-2026-115918 vLLM: Responses API bypasses trust_request_chat_template for chat_template_kwargs

vLLM is an inference and serving engine for large language models. From 0.16.0 until 0.32.0, the /v1/responses endpoint allows an authenticated caller to place an attacker-controlled template in chattemplatekwargschattemplate when no server template is configured...

CVE-2026-115918

The vLLM inference and serving engine (versions 0.16.0 through 0.32.0 ) contains a vulnerability in the /v1/responses endpoint. An authenticated caller can provide an attacker-controlled template via chat_template_kwargs[chat_template] when no server template is configured. Because ChatParams.get...

PT-2026-125028

Name of the Vulnerable Software and Affected Versions vLLM versions 0.16.0 through 0.31.0 Description The '/v1/responses' endpoint allows an authenticated user to provide a malicious template via the chat template variable within chat template kwargs when no server template is configured. The get...

CVE-2026-115331

Lotus through 0.10.2 contains an sql injection vulnerability that allows authenticated organization users to inject SQL by supplying crafted billable metric propertyname or categorical filter values. Attackers can embed SQL in values rendered unescaped into Jinja-generated counter, gauge and rate...

PT-2026-121369

Lotus through 0.10.2 contains an sql injection vulnerability that allows authenticated organization users to inject SQL by supplying crafted billable metric property name or categorical filter values. Attackers can embed SQL in values rendered unescaped into Jinja-generated counter, gauge and rat...

Lotus SQL injection vulnerability

Lotus 0.10.2 and earlier versions contain an SQL injection vulnerability. This vulnerability arises because the billable metric propertyname and category filter values are rendered directly into Jinja-generated queries for counting, dashboards, and rate metrics without proper escaping. As a resul...

Astra Linux – Vulnerability in Jinja2

Jinja is an extensible templating engine. The xmlattr filter in affected versions of Jinja accepts keys that contain non-attribute characters. XML/HTML attributes cannot contain spaces, /, , or =, as each of these characters would be interpreted as the start of a separate attribute. If an...

Astra Linux – vulnerability in Jinja2

Jinja is an extensible templating engine. Prior to version 3.1.5, there was a flaw in how the Jinja sandbox environment detected calls to str.format, allowing an attacker who controls the template’s contents to execute arbitrary Python code. To exploit this vulnerability, an attacker must have...

Astra Linux – vulnerability in Jinja2

Jinja is an extensible templating engine. Special placeholders within the template enable writing code that follows Python syntax. It is possible to inject arbitrary HTML attributes into the rendered HTML template, which could potentially lead to Cross-Site Scripting XSS. The Jinja xmlattr filter...

dynaconf: jinja2: Dynaconf: Arbitrary code execution via Server-Side Template Injection

A flaw was found in dynaconf, a Python configuration management tool. This Server-Side Template Injection SSTI vulnerability occurs due to unsafe template evaluation in the @Jinja resolver when the jinja2 package is installed. A remote attacker could exploit this by embedding malicious template...

CVE-2026-53964

Document Merge Service is a document template merge service providing an API to manage templates and merge them with given data. Prior to version 9.1.0, a remote code execution RCE via server-side template injection SSTI allows for user supplied code to be executed in the server's context where i...

CVE-2026-53964 Document Merge Service vulnerable to RCE via SSTI (xlsx tempaltes)

Document Merge Service is a document template merge service providing an API to manage templates and merge them with given data. Prior to version 9.1.0, a remote code execution RCE via server-side template injection SSTI allows for user supplied code to be executed in the server's context where i...