CVE-2025-23026

jte Java Template Engine is a secure and lightweight template engine for Java and Kotlin. In affected versions Jte HTML templates with script tags or script attributes that include a Javascript template string backticks are subject to XSS. The javaScriptBlock and javaScriptAttribute methods in th...

EUVD-2025-0046

Malicious code in bioql PyPI...

CVE-2025-23026

jte Java Template Engine is a secure and lightweight template engine for Java and Kotlin. In affected versions Jte HTML templates with script tags or script attributes that include a Javascript template string backticks are subject to XSS. The javaScriptBlock and javaScriptAttribute methods in th...

CVE-2025-23026 HTML templates containing Javascript template strings are subject to XSS in jte

jte Java Template Engine is a secure and lightweight template engine for Java and Kotlin. In affected versions Jte HTML templates with script tags or script attributes that include a Javascript template string backticks are subject to XSS. The javaScriptBlock and javaScriptAttribute methods in th...

CVE-2025-23026

jte Java Template Engine is a secure and lightweight template engine for Java and Kotlin. In affected versions Jte HTML templates with "script" tags or script attributes that include a Javascript template string backticks are subject to XSS. The "javaScriptBlock" and "javaScriptAttribute" methods...

ch.helvethink.odoo4java:java-odoo-xml-rpc-plugin (>=0.0.1, <=0.0.6), com.hexagonkt:templates_jte (>=3.4.0, <=3.7.3) +62 more potentially affected by CVE-2025-23026 via gg.jte:jte-runtime (>=1.0.0, <=3.1.15)

gg.jte:jte-runtime MAVEN version =1.0.0, =0.0.1, =3.4.0, =4.0.0-a1, =0.7.0, =0.5.1, =0.7.0, =0.7.3, =0.7.0, =0.14.0, =0.1.1, =0.5.1 and more Source cves: CVE-2025-23026 Source advisory: MEND:CVE-2025-23026...

CVE-2025-23026

Summary: CVE-2025-23026 affects jte (Java Template Engine)

CVE-2025-23026 HTML templates containing Javascript template strings are subject to XSS in jte

jte Java Template Engine is a secure and lightweight template engine for Java and Kotlin. In affected versions Jte HTML templates with script tags or script attributes that include a Javascript template string backticks are subject to XSS. The javaScriptBlock and javaScriptAttribute methods in th...

gg.jte.gradle:gg.jte.gradle.gradle.plugin (1.6.0), gg.jte:jte (1.6.0) +4 more potentially affected by CVE-2025-23026 via gg.jte:jte-runtime (1.6.0)

gg.jte:jte-runtime MAVEN version 1.6.0 is affected by a known vulnerability. The following packages have a transitive dependency on gg.jte:jte-runtime and may be impacted: - gg.jte.gradle:gg.jte.gradle.gradle.plugin 1.6.0 - gg.jte:jte 1.6.0 - gg.jte:jte-gradle-plugin 1.6.0 - gg.jte:jte-maven-plug...

gg.jte.gradle:gg.jte.gradle.gradle.plugin (>=1.7.0, <=1.7.0.1), gg.jte:jte-gradle-plugin (>=1.7.0, <=1.7.0.1) +2 more potentially affected by CVE-2025-23026 via gg.jte:jte (1.7.0)

gg.jte:jte MAVEN version 1.7.0 is affected by a known vulnerability. The following packages have a transitive dependency on gg.jte:jte and may be impacted: - gg.jte.gradle:gg.jte.gradle.gradle.plugin =1.7.0, =1.7.0, =4.0.3, =4.2.0.beta1 Source cves: CVE-2025-23026 Source advisory:...

gg.jte.gradle:gg.jte.gradle.gradle.plugin (>=1.7.0, <=1.7.0.1), gg.jte:jte (1.7.0) +3 more potentially affected by CVE-2025-23026 via gg.jte:jte-runtime (1.7.0)

gg.jte:jte-runtime MAVEN version 1.7.0 is affected by a known vulnerability. The following packages have a transitive dependency on gg.jte:jte-runtime and may be impacted: - gg.jte.gradle:gg.jte.gradle.gradle.plugin =1.7.0, =1.7.0, =4.0.3, =4.2.0.beta1 Source cves: CVE-2025-23026 Source advisory:...

GHSA-VH22-6C6H-RM8Q jte's HTML templates containing Javascript template strings are subject to XSS

Summary Jte HTML templates with script tags or script attributes that include a Javascript template string backticks are subject to XSS. Details The javaScriptBlock and javaScriptAttribute methods in the Escape class source do not escape backticks, which are used for Javascript template strings...

jte's HTML templates containing Javascript template strings are subject to XSS

Summary Jte HTML templates with script tags or script attributes that include a Javascript template string backticks are subject to XSS. Details The javaScriptBlock and javaScriptAttribute methods in the Escape class source do not escape backticks, which are used for Javascript template strings...

com.severell:jte (0.0.2), gg.jte.gradle:gg.jte.gradle.gradle.plugin (1.9.0) +5 more potentially affected by CVE-2025-23026 via gg.jte:jte (1.9.0)

gg.jte:jte MAVEN version 1.9.0 is affected by a known vulnerability. The following packages have a transitive dependency on gg.jte:jte and may be impacted: - com.severell:jte 0.0.2 - gg.jte.gradle:gg.jte.gradle.gradle.plugin 1.9.0 - gg.jte:jte-gradle-plugin 1.9.0 - gg.jte:jte-kotlin 1.9.0 -...

eu.aronnax.smartconstraints:smartconstraints-annotationprocessor (>=0.1.1, <=0.5.1), eu.aronnax.smartconstraints:smartconstraints-reportaggregate (0.5.1) +11 more potentially affected by CVE-2025-23026 via gg.jte:jte-runtime (2.1.2)

gg.jte:jte-runtime MAVEN version 2.1.2 is affected by a known vulnerability. The following packages have a transitive dependency on gg.jte:jte-runtime and may be impacted: - eu.aronnax.smartconstraints:smartconstraints-annotationprocessor =0.1.1, =0.1.1, =2.1.0, =2.1.1, =2.1.1a Source cves:...

gg.jte.gradle:gg.jte.gradle.gradle.plugin (1.6.0), gg.jte:jte-gradle-plugin (1.6.0) +3 more potentially affected by CVE-2025-23026 via gg.jte:jte (1.6.0)

gg.jte:jte MAVEN version 1.6.0 is affected by a known vulnerability. The following packages have a transitive dependency on gg.jte:jte and may be impacted: - gg.jte.gradle:gg.jte.gradle.gradle.plugin 1.6.0 - gg.jte:jte-gradle-plugin 1.6.0 - gg.jte:jte-maven-plugin 1.6.0 -...

ch.helvethink.odoo4java:java-odoo-xml-rpc-plugin (>=0.0.1, <=0.0.6), gg.jte.gradle:gg.jte.gradle.gradle.plugin (2.1.0) +6 more potentially affected by CVE-2025-23026 via gg.jte:jte-runtime (2.1.0)

gg.jte:jte-runtime MAVEN version 2.1.0 is affected by a known vulnerability. The following packages have a transitive dependency on gg.jte:jte-runtime and may be impacted: - ch.helvethink.odoo4java:java-odoo-xml-rpc-plugin =0.0.1, =0.0.6 - gg.jte.gradle:gg.jte.gradle.gradle.plugin 2.1.0 -...

com.hexagonkt:templates_jte (>=3.4.0, <=3.7.3), com.hexagontk:templates_jte (>=4.0.0-a1, <=4.0.0-a6) +48 more potentially affected by CVE-2025-23026 via gg.jte:jte-runtime (>=3.0.0, <=3.1.15)

gg.jte:jte-runtime MAVEN version =3.0.0, =3.4.0, =4.0.0-a1, =0.7.0, =0.6.0, =0.7.0, =0.7.3, =0.7.0, =0.14.0, =3.0.0, =3.0.0, =3.0.0, =3.0.0, =3.0.0, =3.0.0, =3.1.15 and more Source cves: CVE-2025-23026 Source advisory: OSV:GHSA-VH22-6C6H-RM8Q...

gg.jte.gradle:gg.jte.gradle.gradle.plugin (2.0.3), gg.jte:jte (2.0.3) +7 more potentially affected by CVE-2025-23026 via gg.jte:jte-runtime (2.0.3)

gg.jte:jte-runtime MAVEN version 2.0.3 is affected by a known vulnerability. The following packages have a transitive dependency on gg.jte:jte-runtime and may be impacted: - gg.jte.gradle:gg.jte.gradle.gradle.plugin 2.0.3 - gg.jte:jte 2.0.3 - gg.jte:jte-gradle-plugin 2.0.3 -...

gg.jte.gradle:gg.jte.gradle.gradle.plugin (2.0.0), gg.jte:jte (2.0.0) +7 more potentially affected by CVE-2025-23026 via gg.jte:jte-runtime (2.0.0)

gg.jte:jte-runtime MAVEN version 2.0.0 is affected by a known vulnerability. The following packages have a transitive dependency on gg.jte:jte-runtime and may be impacted: - gg.jte.gradle:gg.jte.gradle.gradle.plugin 2.0.0 - gg.jte:jte 2.0.0 - gg.jte:jte-gradle-plugin 2.0.0 -...