CVE-2026-105801 openapi-python-client: Malicious OpenAPI Documents can cause Arbitrary Code Generation

openapi-python-client generates Python clients from OpenAPI documents. Prior to 0.29.1, the generator does not safely neutralize malicious OpenAPI document content before rendering string, docstring, and f-string contexts in generated Python. The generated Python client can contain...

MongoDB Compass Unauthorized Access

The vulnerability of MongoDB Compass’s graphical interface, a database management system for MongoDB, is related to improper code generation practices. Exploiting this vulnerability can allow an attacker to gain unauthorized access to protected information...

CVE-2026-105796: Improper Control of Generation of Code

Kiota is an OpenAPI based HTTP Client code generator. From 0.5.0 until 1.35.0, Kiota's Java and PHP documentation-comment sanitizers delete block-comment terminators rather than neutralizing them, allowing overlapping characters to reform a terminator and place attacker-controlled OpenAPI text...

CVE-2024-50498

CVE-2024-50498 Description Improper Control of Generation of Code 'Code Injection' vulnerability in LUBUS WP Query Console allows Code Injection.This issue affects WP Query Console: from n/a through 1.0. Setup Netcat Listener: Open a terminal on your machine and start a Netcat listener to wait fo...

Ad Adobe Campaign Classic Code Execution

The vulnerability of the Adobe Campaign Classic software platform for conducting marketing campaigns is related to improper code generation. Exploiting this vulnerability allows a malicious actor to execute arbitrary code...

Ad Adobe Campaign Classic Code Execution

The vulnerability of the Adobe Campaign Classic software platform for conducting marketing campaigns is related to improper code generation. Exploiting this vulnerability allows a malicious actor to execute arbitrary code...

Ad Adobe Campaign Classic Code Execution

The vulnerability of the Adobe Campaign Classic software platform for conducting marketing campaigns is related to improper code generation. Exploiting this vulnerability allows a malicious actor to execute arbitrary code...

Adobe Campaign Classic DoS

The vulnerability of the Adobe Campaign Classic software platform for conducting marketing campaigns is related to improper code generation. Exploiting this vulnerability can allow a malicious actor to cause service failures...

Ad Adobe Campaign Classic Code Execution

The vulnerability of the Adobe Campaign Classic software platform for conducting marketing campaigns is related to improper code generation. Exploiting this vulnerability allows a malicious actor to execute arbitrary code...

Ad Adobe Campaign Classic Code Execution

The vulnerability of the Adobe Campaign Classic software platform for conducting marketing campaigns is related to improper code generation. Exploiting this vulnerability allows a malicious actor to execute arbitrary code...

Ad Adobe Campaign Classic Code Execution

The vulnerability of the Adobe Campaign Classic software platform for conducting marketing campaigns is related to improper code generation. Exploiting this vulnerability allows a malicious actor to execute arbitrary code...

Microsoft SharePoint Server Code Execution

The vulnerability of the ToolPane.GetPartPreviewAndPropertiesFromMarkup function in Microsoft SharePoint Server, Microsoft SharePoint Enterprise Server, and Microsoft SharePoint Server Subscription Edition packages is related to improper code generation. Exploiting this vulnerability could allow ...

Self-Evolving Defense: Continual Security Policy Learning for LLM Agents

Large language models LLMs increasingly power agents that access sensitive information, use external tools, and modify software repositories. Although these capabilities offer substantial benefits, they also create security risks such as jailbreaks, prompt injection, and vulnerable code generatio...

NPM vm2 Code Execution

The vulnerability of the NPM package manager’s vm2 library is related to incorrect code generation management. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...

NPM vm2 Code Execution

The vulnerability of the NPM package manager’s vm2 library is related to incorrect code generation management. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...

Security Component Full Control

The vulnerability of Oracle PeopleSoft Enterprise Campus Solutions’ Security component is related to improper code generation management. Exploiting this vulnerability allows a malicious actor to gain full control over the application using the HTTPS protocol...

ROS-20260915-73-0009

The vulnerability of the Accessibility component in Google Chrome and Microsoft Edge is related to improper code generation. Exploiting this vulnerability can allow an attacker to gain access to confidential data and compromise data integrity...

Astra Linux – Vulnerability in Thunderbird, Firefox

A bug in WebAssembly code generation could potentially lead to a crash. It might have been possible for an attacker to exploit this to execute malicious code. This vulnerability has been fixed in Firefox 135, Firefox ESR 128.7, Thunderbird 128.7, and Thunderbird 135...

ROS-20260914-73-0094

The vulnerability of the SVG component in Google Chrome browser is related to improper handling of code generation. Exploiting this vulnerability allows a remote attacker to execute arbitrary code through a specially created HTML page...

Core Component Oracle Coherence Full Control

The vulnerability of the Core component of the Oracle Coherence data processing software is related to improper code generation management. Exploiting this vulnerability can allow an attacker to gain full control over the application using the TCP protocol...