Linux Distros Unpatched Vulnerability : CVE-2026-89581

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - bpf, x86: Fix per-CPU address resolution into an extended register The destination of the per-CPU address MOV is encoded in ModRM.reg, which is extended by REX....

What Is the Difference between Me and You? Benchmarking the Quality Gap between Human-Written and AI-Generated Code

AI coding assistants are becoming co-authors of production software, yet their evaluation centers on functional correctness, leaving open whether their code differs from human code in the quality dimensions dominating lifecycle cost. We compare human-written and AI-generated code at scale: 787,56...

ROS-20260911-73-0077

The vulnerability of the Headless web browsers Google Chrome and Microsoft Edge is related to improper code generation. Exploiting this vulnerability can allow a remote attacker to trigger a service failure through a specially created HTML page...

C omni-completion module Code Execution

The vulnerability of the C omni-completion mechanism in the runtime/autoload/ccomplete.vim text editor Vim is related to improper code generation control. Exploiting this vulnerability can allow an attacker to execute arbitrary code...

python3complete.vim Code Execution

The vulnerability of the PHP code autocompletion mechanism in the Python omni-completion module python3complete.vim text editor Vim is related to incorrect code generation management. Exploiting this vulnerability can allow an attacker to execute arbitrary code...

Vim Code Execution

The vulnerability of the vmsfixfilename function in the Vim/src/osvms.c file of the Vim text editor is related to incorrect code generation. Exploiting this vulnerability could allow an attacker to execute arbitrary code...

netrw Plugin RCE

The vulnerability of the netrw text editor plugin in Vim is related to incorrect code generation management. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...

Python omni-completion module autoload Code Execution

The vulnerability of the Python omni-completion module’s autoload mechanism, located in the runtime/autoload/python3complete.vim file, is related to improper code generation management. Exploiting this vulnerability allows an attacker to execute arbitrary code...

CVE-2026-88937

knowns through 0.33.0 fails to properly validate template destination paths in the code generation template engine, allowing attackers to read and write arbitrary files outside the project root. Attackers can supply malicious templates that traverse directories to overwrite shell profiles, steal...

CVE-2026-88937 knowns through 0.33.0 Path Traversal via Template Engine

knowns through 0.33.0 fails to properly validate template destination paths in the code generation template engine, allowing attackers to read and write arbitrary files outside the project root. Attackers can supply malicious templates that traverse directories to overwrite shell profiles, steal...

CVE-2026-88937 knowns through 0.33.0 Path Traversal via Template Engine

knowns through 0.33.0 fails to properly validate template destination paths in the code generation template engine, allowing attackers to read and write arbitrary files outside the project root. Attackers can supply malicious templates that traverse directories to overwrite shell profiles, steal...

ROS-20260910-73-0030

The vulnerability of the USB component in Google Chrome and Microsoft Edge browsers is related to improper code generation. Exploiting this vulnerability can allow an attacker to cause a service failure through a specially created HTML page...

CVE-2026-88937: Improper Limitation of a Pathname to a Restricted Directory

knowns through 0.33.0 fails to properly validate template destination paths in the code generation template engine, allowing attackers to read and write arbitrary files outside the project root. Attackers can supply malicious templates that traverse directories to overwrite shell profiles, steal...

PT-2026-89478

knowns through 0.33.0 fails to properly validate template destination paths in the code generation template engine, allowing attackers to read and write arbitrary files outside the project root. Attackers can supply malicious templates that traverse directories to overwrite shell profiles, steal...

GitPython Code Execution

The vulnerability of the Python library for interacting with git repositories, GitPython, is related to improper code generation management. Exploiting this vulnerability allows a malicious actor to execute arbitrary code remotely...

CS-Guard: Benchmarking LLM Guardrails for Code Generation Security

Large language models LLMs have been ex- ploited to generate malware, but the effective- ness of guardrails for code generation secu- rity remains unclear. We introduce CS-Guard, the first benchmark to systematically evalu- ate guardrails for code generation security. It covers 1 text-to-code...

ROS-20260909-73-0171

The vulnerability of the JavaScript script handler in Google Chrome’s V8 engine is related to improper code generation. Exploiting this vulnerability can allow an attacker to cause a service failure through a specially created HTML page...

ROS-20260909-73-0126

The vulnerability of JavaScript script handlers in Google Chrome and Microsoft Edge browsers is related to improper code generation. Exploiting this vulnerability can allow a malicious actor to cause service interruptions through a specially created HTML page...

ROS-20260909-73-0113

The vulnerability of JavaScript script handlers in Google Chrome and Microsoft Edge browsers is related to improper code generation. Exploiting this vulnerability can allow a malicious actor to cause service interruptions through a specially created HTML page...

CVE-2026-25194

CVE-2026-35194 — Apache Flink SQL 代码注入 通过 SQL 代码生成注入，在 Apache Flink TaskManager 上实现远程代码执行。 | ---|--- CVE| CVE-2026-35194 CVSS| 8.1（高危） CWE| CWE-94 — 代码注入 受影响版本| Flink 1.15.0 – 1.20.3 / 2.0.0 – 2.2.0 修复版本| 1.20.4 / 2.0.2 / 2.1.2 / 2.2.1 攻击面| SQL Gateway REST API（默认端口 8083，无认证） 快速开始 1. 部署漏洞实验环境...