EUVD-2025-198318

LangChain is a framework for building agents and LLM-powered applications. From versions 0.3.79 and prior and 1.0.0 to 1.0.6, a template injection vulnerability exists in LangChain's prompt template system that allows attackers to access Python object internals through template syntax. This...

CVE-2025-65106 LangChain Vulnerable to Template Injection via Attribute Access in Prompt Templates

LangChain is a framework for building agents and LLM-powered applications. From versions 0.3.79 and prior and 1.0.0 to 1.0.6, a template injection vulnerability exists in LangChain's prompt template system that allows attackers to access Python object internals through template syntax. This...

CVE-2025-65106

CVE-2025-65106 — LangChain template injection : LangChain versions 0.3.79 and earlier and 1.0.0 to 1.0.6 contain a template injection vulnerability in the prompt template system that allows access to Python object internals via template syntax, affecting ChatPromptTemplate and related classes whe...

CVE-2025-11003

The UiPress lite | Effortless custom dashboards, admin themes and pages plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability check on the 'uipsaveuitemplate' function in all versions up to, and including, 3.5.08. This makes it possible for...

PT-2025-47673

The UiPress lite | Effortless custom dashboards, admin themes and pages plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability check on the 'uip save ui template' function in all versions up to, and including, 3.5.08. This makes it possible for...

WordPress plugin UiPress lite 安全漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a set of blogging platforms developed using the PHP language. The platform has the ability to set up personal blog sites on PHP and MySQL based servers.WordPress plugin is an application plugin. A security...

LangChain Vulnerable to Template Injection via Attribute Access in Prompt Templates

Context A template injection vulnerability exists in LangChain's prompt template system that allows attackers to access Python object internals through template syntax. This vulnerability affects applications that accept untrusted template strings not just template variables in ChatPromptTemplate...

GHSA-6QV9-48XG-FC7F LangChain Vulnerable to Template Injection via Attribute Access in Prompt Templates

Context A template injection vulnerability exists in LangChain's prompt template system that allows attackers to access Python object internals through template syntax. This vulnerability affects applications that accept untrusted template strings not just template variables in ChatPromptTemplate...

CVE-2019-19823

creationtimestamp| type| source ---|---|--- 2025-11-20 11:50:03+00:00| confirmed| https://github.com/projectdiscovery/nuclei-templates/tree/main/http/cves/2019/CVE-2019-19823.yaml 2025-11-21 21:02:49+00:00| seen| https://bsky.app/profile/beikokucyber.bsky.social/post/3m666lbfleu2w...

CVE-2019-19822

creationtimestamp| type| source ---|---|--- 2025-11-20 11:49:58+00:00| confirmed| https://github.com/projectdiscovery/nuclei-templates/tree/main/http/cves/2019/CVE-2019-19822.yaml 2025-11-21 21:02:47+00:00| seen| https://bsky.app/profile/beikokucyber.bsky.social/post/3m666lbcxs22j...

CVE-2018-13317

creationtimestamp| type| source ---|---|--- 2025-11-20 11:49:55+00:00| confirmed| https://github.com/projectdiscovery/nuclei-templates/tree/main/http/cves/2018/CVE-2018-13317.yaml 2025-11-21 21:02:46+00:00| seen| https://bsky.app/profile/beikokucyber.bsky.social/post/3m666lbabq42b...

CVE-2017-14725

creationtimestamp| type| source ---|---|--- 2025-11-20 02:20:24+00:00| confirmed| https://github.com/projectdiscovery/nuclei-templates/tree/main/http/cves/2017/CVE-2017-14725.yaml 2025-11-21 21:02:45+00:00| seen| https://bsky.app/profile/beikokucyber.bsky.social/post/3m666lb2kbc2b...

CVE-2017-17092

creationtimestamp| type| source ---|---|--- 2025-11-20 02:12:04+00:00| confirmed| https://github.com/projectdiscovery/nuclei-templates/tree/main/http/cves/2017/CVE-2017-17092.yaml 2025-11-21 21:02:45+00:00| seen| https://bsky.app/profile/beikokucyber.bsky.social/post/3m666lb5cds25...

PT-2025-47809

Name of the Vulnerable Software and Affected Versions LangChain versions 0.3.79 and prior LangChain versions 1.0.0 through 1.0.6 Description LangChain is a framework used for building agents and applications powered by Large Language Models LLMs. A template injection issue exists in the prompt...

CVE-2025-6251 Royal Elementor Addons and Templates <= 1.7.1036 - Authenticated (Contributor+) Stored Cross-Site Scripting

The Royal Elementor Addons and Templates plugin for WordPress is vulnerable to Stored Cross-Site Scripting via $item'fieldid' in all versions up to, and including, 1.7.1036 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, with...

PT-2025-47425

The Royal Elementor Addons and Templates plugin for WordPress is vulnerable to Stored Cross-Site Scripting via $item'field id' in all versions up to, and including, 1.7.1036 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, with...

WordPress Royal Elementor Addons and Templates plugin <= 1.7.1036 - Authenticated (Contributor+) Stored Cross-Site Scripting vulnerability

Authenticated Contributor+ Stored Cross-Site Scripting vulnerability discovered by stealthcopter in WordPress Plugin Royal Elementor Addons versions = 1.7.1036...

CVE-2025-9316

creationtimestamp| type| source ---|---|--- 2025-11-18 18:14:32+00:00| confirmed| https://github.com/projectdiscovery/nuclei-templates/tree/main/http/cves/2025/CVE-2025-9316.yaml 2025-11-20 13:07:24+00:00| seen|...

WordPress WooCommerce PDF Invoice Builder plugin missing license vulnerability

WordPress WooCommerce PDF Invoice Builder plugin is designed for WooCommerce e-commerce platform invoice and packing slip generation tool, support customized templates, multi-language, conditional generation and other features, to help merchants create professional documents in line with the bran...

WordPress WPKoi Templates for Elementor plugin missing license vulnerability

WordPress WPKoi Templates for Elementor plugin is a template plugin designed for Elementor page builder, offering 400+ preset templates and dynamic elements to help users quickly create visual websites. The WordPress WPKoi Templates for Elementor plugin suffers from a missing authorization...