CVE-2026-0685

The Genshi Template Engine (version 0.7.9 ) is vulnerable to Server-Side Template Injection (SSTI) due to the unsafe evaluation of expressions in the eval.py component. The root cause is the use of Python's eval() and exec() functions, which allow fallback access to Python's built-in namespace (i...

CVE-2026-0685 Server side template inject (SSTI) in Edgewall Genshi Template Engine

Server side template inject SSTI in the expression evaluation component in Genshi Template Engine version 0.7.9 allows a remote attacker to achieve remote code execution RCE via crafted template expressions...