Lucene search
+L

14144 matches found

Github Security Blog
Github Security Blog
added 2026/04/03 9:53 p.m.15 views

Budibase: Command Injection in Bash Automation Step

Location: packages/server/src/automations/steps/bash.ts Description The bash automation step executes user-provided commands using execSync without proper sanitization or validation. User input is processed through processStringSync which allows template interpolation, potentially allowing...

8.8CVSS6.5AI score0.00466EPSS
SaveExploits0References4Affected Software1
OSV
OSV
added 2026/04/03 9:41 p.m.9 views

CVE-2026-28797 RAGFlow: Server-Side Template Injection (SSTI) leading to Remote Code Execution (RCE) in Agent "Text Processing" Component

RAGFlow is an open-source RAG Retrieval-Augmented Generation engine. In versions 0.24.0 and prior, a Server-Side Template Injection SSTI vulnerability exists in RAGFlow's Agent workflow Text Processing StringTransform and Message components. These components use Python's jinja2.Template unsandbox...

8.7CVSS6.2AI score
SaveExploits0References3
ATTACKERKB
ATTACKERKB
added 2026/04/03 9:41 p.m.5 views

CVE-2026-28797

RAGFlow is an open-source RAG Retrieval-Augmented Generation engine. In versions 0.24.0 and prior, a Server-Side Template Injection SSTI vulnerability exists in RAGFlow's Agent workflow Text Processing StringTransform and Message components. These components use Python's jinja2.Template unsandbox...

8.7CVSS6.2AI score0.00386EPSS
SaveExploits2References2Affected Software1
Vulnrichment
Vulnrichment
added 2026/04/03 9:41 p.m.4 views

CVE-2026-28797 RAGFlow: Server-Side Template Injection (SSTI) leading to Remote Code Execution (RCE) in Agent "Text Processing" Component

RAGFlow is an open-source RAG Retrieval-Augmented Generation engine. In versions 0.24.0 and prior, a Server-Side Template Injection SSTI vulnerability exists in RAGFlow's Agent workflow Text Processing StringTransform and Message components. These components use Python's jinja2.Template unsandbox...

8.7CVSS6.2AI score0.00386EPSS
SaveExploits2References1
EUVD
EUVD
added 2026/04/03 9:41 p.m.8 views

EUVD-2026-18876

RAGFlow is an open-source RAG Retrieval-Augmented Generation engine. In versions 0.24.0 and prior, a Server-Side Template Injection SSTI vulnerability exists in RAGFlow's Agent workflow Text Processing StringTransform and Message components. These components use Python's jinja2.Template unsandbox...

8.7CVSS6.2AI score0.00386EPSS
SaveExploits2References1
CVE
CVE
added 2026/04/03 9:41 p.m.40 views

CVE-2026-28797

RAGFlow (open-source Retrieval-Augmented Generation engine) is affected in versions ≤0.24.0 by a Server-Side Template Injection (SSTI) in the Agent workflow Text Processing (StringTransform) and Message components. The vulnerability arises from rendering user-supplied templates with Python’s jinj...

8.8CVSS6.2AI score0.00386EPSS
SaveExploits2References1Affected Software1
Cvelist
Cvelist
added 2026/04/03 9:41 p.m.30 views

CVE-2026-28797 RAGFlow: Server-Side Template Injection (SSTI) leading to Remote Code Execution (RCE) in Agent "Text Processing" Component

RAGFlow is an open-source RAG Retrieval-Augmented Generation engine. In versions 0.24.0 and prior, a Server-Side Template Injection SSTI vulnerability exists in RAGFlow's Agent workflow Text Processing StringTransform and Message components. These components use Python's jinja2.Template unsandbox...

8.7CVSS0.00386EPSS
SaveExploits2References1
Fedora
Fedora
added 2026/04/03 5:04 p.m.11 views

[SECURITY] Fedora 42 Update: cmake-3.31.11-1.fc42

CMake is used to control the software compilation process using simple platform and compiler independent configuration files. CMake generates native makefiles and workspaces that can be used in the compiler environment of your choice. CMake is quite sophisticated: it is possible to support comple...

4.8CVSS6AI score0.00146EPSS
SaveExploits0
NVD
NVD
added 2026/04/03 4:16 p.m.19 views

CVE-2026-25044

Budibase is an open-source low-code platform. Prior to version 3.33.4, the bash automation step executes user-provided commands using execSync without proper sanitization or validation. User input is processed through processStringSync which allows template interpolation, potentially allowing...

8.8CVSS0.00466EPSS
SaveExploits0References2
Cvelist
Cvelist
added 2026/04/03 3:38 p.m.30 views

CVE-2026-25044 Budibase: Command Injection in Bash Automation Step

Budibase is an open-source low-code platform. Prior to version 3.33.4, the bash automation step executes user-provided commands using execSync without proper sanitization or validation. User input is processed through processStringSync which allows template interpolation, potentially allowing...

8.7CVSS0.00466EPSS
SaveExploits0References2
EUVD
EUVD
added 2026/04/03 3:31 a.m.10 views

EUVD-2026-18568

Shynet before 0.14.0 allows XSS in urldisplay and iconify template filters,...

5.4CVSS5.9AI score0.00153EPSS
SaveExploits0References3
NVD
NVD
added 2026/04/03 2:16 a.m.11 views

CVE-2026-35508

Shynet before 0.14.0 allows XSS in urldisplay and iconify template filters,...

6.1CVSS0.00153EPSS
SaveExploits0References2
Cvelist
Cvelist
added 2026/04/03 1:13 a.m.24 views

CVE-2026-35508

Shynet before 0.14.0 allows XSS in urldisplay and iconify template filters,...

5.4CVSS0.00153EPSS
SaveExploits0References2
OSV
OSV
added 2026/04/03 1:13 a.m.7 views

CVE-2026-35508

Shynet before 0.14.0 allows XSS in urldisplay and iconify template filters,...

5.4CVSS5.9AI score
SaveExploits0References4
ATTACKERKB
ATTACKERKB
added 2026/04/03 1:13 a.m.5 views

CVE-2026-35508

Shynet before 0.14.0 allows XSS in urldisplay and iconify template filters,...

5.4CVSS5.9AI score0.00153EPSS
SaveExploits0References3
CVE
CVE
added 2026/04/03 1:13 a.m.27 views

CVE-2026-35508

CVE-2026-35508 affects Shynet prior to version 0.14.0. The vulnerability is an XSS in the urldisplay and iconify template filters, caused by improper handling in the template rendering paths. The CVSS3.1 vector (AV:N/AC:H/PR:N/UI:N/S:C/C:L/I:L/A:N) yields a base score of 5.4 (Medium) with network...

6.1CVSS5.9AI score0.00153EPSS
SaveExploits0References2Affected Software1
CNNVD
CNNVD
added 2026/04/03 12:00 a.m.19 views

shynet 跨站脚本漏洞

Shynet is a self-hosted website analysis tool developed by R. Miles McCain. Versions of Shynet prior to 0.14.0 contained a cross-site scripting vulnerability, which originated from the urldisplay and iconify template filters having cross-site scripts...

6.1CVSS5.7AI score0.00153EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies
added 2026/04/03 12:00 a.m.10 views

PT-2026-29971

Name of the Vulnerable Software and Affected Versions Shynet versions prior to 0.14.0 Description The software contains a cross-site scripting XSS issue in the 'urldisplay' and 'iconify' template filters. Recommendations Update to version 0.14.0 or later...

6.1CVSS4.8AI score0.00153EPSS
SaveExploits0References6
Positive Technologies
Positive Technologies
added 2026/04/03 12:00 a.m.13 views

PT-2026-30249

Name of the Vulnerable Software and Affected Versions RAGFlow versions prior to 0.24.0 Description An issue exists in the Agent workflow Text Processing StringTransform and Message components. These components utilize an unsandboxed Python jinja2.Template to render templates provided by users. Th...

8.8CVSS6.1AI score0.00386EPSS
SaveExploits2References5
Positive Technologies
Positive Technologies
added 2026/04/03 12:00 a.m.16 views

PT-2026-30282

Summary The Dockerfile generation function generate containerfile in src/bentoml/ internal/container/generate.py uses an unsandboxed jinja2.Environment with the jinja2.ext.do extension to render user-provided dockerfile template files. When a victim imports a malicious bento archive and runs...

8.8CVSS6.5AI score0.00392EPSS
SaveExploits1References4
Rows per page
Query Builder