CVE-2026-105801

The openapi-python-client library (prior to version 0.29.1 ) is vulnerable to arbitrary code generation because it fails to neutralize malicious content within OpenAPI documents before rendering string, docstring, and f-string contexts . An attacker providing a malicious OpenAPI document can caus...

CVE-2026-105801 openapi-python-client: Malicious OpenAPI Documents can cause Arbitrary Code Generation

openapi-python-client generates Python clients from OpenAPI documents. Prior to 0.29.1, the generator does not safely neutralize malicious OpenAPI document content before rendering string, docstring, and f-string contexts in generated Python. The generated Python client can contain...

CVE-2026-105796: Improper Control of Generation of Code

Kiota is an OpenAPI based HTTP Client code generator. From 0.5.0 until 1.35.0, Kiota's Java and PHP documentation-comment sanitizers delete block-comment terminators rather than neutralizing them, allowing overlapping characters to reform a terminator and place attacker-controlled OpenAPI text...

The vulnerability of MongoDB Compass’s graphical interface, a database management system by MongoDB, allows attackers to gain unauthorized access to protected information.

The vulnerability of MongoDB Compass’s graphical interface, a database management system for MongoDB, is related to improper code generation practices. Exploiting this vulnerability can allow an attacker to gain unauthorized access to protected information...

CVE-2024-50498

CVE-2024-50498 Descripción La vulnerabilidad de Control Inadecuado de Generación de Código 'Code Injection' en LUBUS WP Query Console permite la inyección de código. Este problema afecta a WP Query Console: desde n/a hasta 1.0. Configurar el listener de Netcat: Abre una terminal en tu máquina e...

The vulnerability of the software platform for conducting marketing campaigns in Adobe Campaign Classic, related to improper code generation, allows a hacker to trigger a service failure.

The vulnerability of the Adobe Campaign Classic software platform for conducting marketing campaigns is related to improper code generation. Exploiting this vulnerability can allow a malicious actor to cause service failures...

The vulnerability of the Adobe Campaign Classic software platform for conducting marketing campaigns stems from improper handling of code generation. This allows attackers to execute arbitrary code.

The vulnerability of the Adobe Campaign Classic software platform for conducting marketing campaigns is related to improper code generation. Exploiting this vulnerability allows a malicious actor to execute arbitrary code...

The vulnerability of the Adobe Campaign Classic software platform for conducting marketing campaigns stems from improper handling of code generation. This allows attackers to execute arbitrary code.

The vulnerability of the Adobe Campaign Classic software platform for conducting marketing campaigns is related to improper code generation. Exploiting this vulnerability allows a malicious actor to execute arbitrary code...

The vulnerability of the Adobe Campaign Classic software platform for conducting marketing campaigns stems from improper handling of code generation. This allows attackers to execute arbitrary code.

The vulnerability of the Adobe Campaign Classic software platform for conducting marketing campaigns is related to improper code generation. Exploiting this vulnerability allows a malicious actor to execute arbitrary code...

The vulnerability of the Adobe Campaign Classic software platform for conducting marketing campaigns stems from improper handling of code generation. This allows attackers to execute arbitrary code.

The vulnerability of the Adobe Campaign Classic software platform for conducting marketing campaigns is related to improper code generation. Exploiting this vulnerability allows a malicious actor to execute arbitrary code...

The vulnerability of the Adobe Campaign Classic software platform for conducting marketing campaigns stems from improper handling of code generation. This allows attackers to execute arbitrary code.

The vulnerability of the Adobe Campaign Classic software platform for conducting marketing campaigns is related to improper code generation. Exploiting this vulnerability allows a malicious actor to execute arbitrary code...

The vulnerability of the Adobe Campaign Classic software platform for conducting marketing campaigns stems from improper handling of code generation. This allows attackers to execute arbitrary code.

The vulnerability of the Adobe Campaign Classic software platform for conducting marketing campaigns is related to improper code generation. Exploiting this vulnerability allows a malicious actor to execute arbitrary code...

DeepGuard

DeepGuard 📖 Project Overview DeepGuard is an innovative secure code generation approach that enhances large language models' capability for secure code generation through multi-layer semantic aggregation techniques. This method effectively identifies and mitigates security vulnerabilities in code...

The vulnerability of the ToolPane.GetPartPreviewAndPropertiesFromMarkup() function in Microsoft SharePoint Server, Microsoft SharePoint Enterprise Server, and Microsoft SharePoint Server Subscription Edition packages allows a attacker to execute arbitrary code.

The vulnerability of the ToolPane.GetPartPreviewAndPropertiesFromMarkup function in Microsoft SharePoint Server, Microsoft SharePoint Enterprise Server, and Microsoft SharePoint Server Subscription Edition packages is related to improper code generation. Exploiting this vulnerability could allow ...

Self-Evolving Defense: Continual Security Policy Learning for LLM Agents

Large language models LLMs increasingly power agents that access sensitive information, use external tools, and modify software repositories. Although these capabilities offer substantial benefits, they also create security risks such as jailbreaks, prompt injection, and vulnerable code generatio...

The vulnerability of the NPM packet manager’s vm2 library, related to improper code generation management, allows an attacker to execute arbitrary code.

The vulnerability of the NPM package manager’s vm2 library is related to incorrect code generation management. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...

The vulnerability of the NPM packet manager’s vm2 library, related to improper code generation management, allows an attacker to execute arbitrary code.

The vulnerability of the NPM package manager’s vm2 library is related to incorrect code generation management. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...

The vulnerability of the Security component of the Oracle PeopleSoft Enterprise Campus Solutions platform allows a hacker to gain full control over the application.

The vulnerability of Oracle PeopleSoft Enterprise Campus Solutions’ Security component is related to improper code generation management. Exploiting this vulnerability allows a malicious actor to gain full control over the application using the HTTPS protocol...

ROS-20260915-73-0009

The vulnerability of the Accessibility component in Google Chrome and Microsoft Edge is related to improper code generation. Exploiting this vulnerability can allow an attacker to gain access to confidential data and compromise data integrity...

Astra Linux – Vulnerability in Thunderbird, Firefox

A bug in WebAssembly code generation could potentially lead to a crash. It might have been possible for an attacker to exploit this to execute malicious code. This vulnerability has been fixed in Firefox 135, Firefox ESR 128.7, Thunderbird 128.7, and Thunderbird 135...