CVE-2026-44966 Velocity.js: Prototype Pollution in #set path assignment

Velocity.js is a JavaScript implementation of the Apache Velocity template engine. In 2.1.5 and earlier, a prototype pollution vulnerability was discovered in velocityjs. This issue occurs during the processing of set directives in Velocity templates. If an application renders a template controll...

NPM: Velocity.js has a Prototype Pollution vulnerability through #set path assignment

NPM: Velocity.js has a Prototype Pollution vulnerability through set path assignment discovered by ? in WordPress Npm velocityjs versions = 2.1.5...

FreeBSD : slim -- insecure PATH assignment (68c7187a-abd2-11df-9be6-0015587e2cc1)

SLiM assigns logged on users a PATH in which the current working directory './' is included. This PATH can allow unintentional code execution through planted binaries and has therefore been fixed SLiM version 1.3.2. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and...

slim -- insecure PATH assignment

SLiM assigns logged on users a PATH in which the current working directory "./" is included. This PATH can allow unintentional code execution through planted binaries and has therefore been fixed SLiM version 1.3.2...