EUVD-2021-32422

Malicious code in bioql PyPI...

EUVD-2021-32426

Malicious code in bioql PyPI...

EUVD-2021-32423

Malicious code in bioql PyPI...

EUVD-2021-32425

Malicious code in bioql PyPI...

EUVD-2023-29965

Malicious code in bioql PyPI...

EUVD-2025-29045

Malicious code in bioql PyPI...

EUVD-2025-29844

Malicious code in bioql PyPI...

EUVD-2025-30832

Malicious code in bioql PyPI...

EUVD-2021-32421

Malicious code in bioql PyPI...

EUVD-2022-7032

Malicious code in bioql PyPI...

EUVD-2021-32424

Malicious code in bioql PyPI...

EUVD-2021-32427

Malicious code in bioql PyPI...

EUVD-2024-28293

Malicious code in bioql PyPI...

CVE-2025-10380

The Advanced Views – Display Posts, Custom Fields, and More plugin for WordPress is vulnerable to Server-Side Template Injection in all versions up to, and including, 3.7.19. This is due to insufficient input sanitization and lack of access control when processing custom Twig templates in the Mod...

PT-2025-39110

Name of the Vulnerable Software and Affected Versions Advanced Views – Display Posts, Custom Fields, and More plugin for WordPress versions up to and including 3.7.19 Description The Advanced Views – Display Posts, Custom Fields, and More plugin for WordPress is susceptible to Server-Side Templat...

CVE-2025-54815

Server-side template injection SSTI vulnerability in PPress 0.0.9 allows attackers to execute arbitrary code via crafted themes...

CVE-2025-9556

Langchaingo supports the use of jinja2 syntax when parsing prompts, which is in turn parsed using the gonja library v1.5.3. Gonja supports include and extends syntax to read files, which leads to a server side template injection vulnerability within langchaingo, allowing an attacker to insert a...

CVE-2025-9556 CVE-2025-9556

Langchaingo supports the use of jinja2 syntax when parsing prompts, which is in turn parsed using the gonja library v1.5.3. Gonja supports include and extends syntax to read files, which leads to a server side template injection vulnerability within langchaingo, allowing an attacker to insert a...

LangChain Go 安全漏洞

LangChain Go is a simple framework for writing LLM-based programs in Go by the individual developer Travis Cline. A security vulnerability exists in LangChain Go version 0.1.14, which stems from support for include and extends syntax for reading files, and could lead to a server-side template...

CVE-2025-58642 WordPress LTL Freight Quotes – Day & Ross Edition Plugin <= 2.1.11 - PHP Object Injection Vulnerability

Deserialization of Untrusted Data vulnerability in enituretechnology LTL Freight Quotes – Day & Ross Edition ltl-freight-quotes-day-ross-edition allows Object Injection.This issue affects LTL Freight Quotes – Day & Ross Edition: from n/a through = 2.1.11...