Kimai has an Authenticated Server-Side Template Injection (SSTI)

Kimai 2.45.0 - Authenticated Server-Side Template Injection SSTI Vulnerability Summary | Field | Value | |-------|-------| | Title | Authenticated SSTI via Permissive Export Template Sandbox || Attack Vector | Network | | Attack Complexity | Low | | Privileges Required | High Admin with export...

MAL-2025-38982 Malicious code in web-zero-export-sandbox-view (npm)

The package web-zero-export-sandbox-view was found to contain malicious code...

Malicious code in web-zero-export-sandbox-view (npm)

The package web-zero-export-sandbox-view was found to contain malicious code...