CVE-2026-127109

A code injection vulnerability exists in the template-loading functionality of the promzard library. The flaw occurs because the library inserts context object property names into a generated function's parameter list without proper validation or escaping. This allows an attacker who can control ...