EUVD-2026-89475

The application uses unsafe functions that allow execution of inline scripts and string evaluation functions...

CVE-2026-69662

The application uses unsafe functions that allow execution of inline scripts and string evaluation functions...

CVE-2026-69662: Improper Neutralization of Directives in Dynamically Evaluated Code

The application uses unsafe functions that allow execution of inline scripts and string evaluation functions...

PT-2026-102903

The application uses unsafe functions that allow execution of inline scripts and string evaluation functions...

Arbitrary Code Injection

Overview happy-dom is a Happy DOM is a JavaScript implementation of a web browser without its graphical user interface. It includes many web standards from WHATWG DOM and HTML. Affected versions of this package are vulnerable to Arbitrary Code Injection due to default evaluation of code from...

Arbitrary Code Injection

Overview org.webjars.npm:happy-dom is a Happy DOM is a JavaScript implementation of a web browser without its graphical user interface. It includes many web standards from WHATWG DOM and HTML. Affected versions of this package are vulnerable to Arbitrary Code Injection due to default evaluation o...

EUVD-2020-0009

Malware in sbrugna...

CVE-2014-2686

Ansible prior to 1.5.4 mishandles the evaluation of some strings...

CVE-2024-52552

The Jenkins Authorize Project Plugin (versions 1.7.2 and earlier ) is vulnerable to a stored cross-site scripting (XSS) vulnerability. The root cause is that the plugin evaluates a string containing the job name using JavaScript on the Authorization view . Attackers with Item/Configure permission...

SUSE CVE-2016-6185

The XSLoader::load method in XSLoader in Perl does not properly locate .so files when called in a string eval, which might allow local users to execute arbitrary code via a Trojan horse library under the current working directory...

CVE-2021-32756

ManageIQ is an open-source management platform. In versions prior to jansa-4, kasparov-2, and lasker-1, there is a flaw in the MiqExpression module of ManageIQ where a low privilege user could enter a crafted Ruby string which would be evaluated. Successful exploitation will allow an attacker to...

CVE-2021-32756: Improper Neutralization of Special Elements in Output Used by a Downstream Component

ManageIQ is an open-source management platform. In versions prior to jansa-4, kasparov-2, and lasker-1, there is a flaw in the MiqExpression module of ManageIQ where a low privilege user could enter a crafted Ruby string which would be evaluated. Successful exploitation will allow an attacker to...

python-reportlab security update

2.3-3.el610.1 - Do not eval strings passed to toColor - Resolves: 1788551...

CVE-2014-2686

Ansible prior to 1.5.4 mishandles the evaluation of some strings...

DEBIAN-CVE-2014-2686

Ansible prior to 1.5.4 mishandles the evaluation of some strings...

PYSEC-2020-198

Ansible prior to 1.5.4 mishandles the evaluation of some strings...

CVE-2014-2686

Ansible prior to 1.5.4 mishandles the evaluation of some strings...

UBUNTU-CVE-2014-2686

Ansible prior to 1.5.4 mishandles the evaluation of some strings...

CVE-2014-2686

Ansible prior to 1.5.4 mishandles the evaluation of some strings...

CVE-2014-2686

Ansible prior to 1.5.4 mishandles the evaluation of some strings...