CVE-2026-72827 Grav CMS before 2.0.13 Remote Code Execution via Twig

Grav CMS before 2.0.13 contains a server-side template injection vulnerability in email-action parameters that allows low-privileged page editors to execute arbitrary operating-system commands. Attackers can inject Twig payloads using the unsandboxed find filter in email subject, body, to, or fro...

CVE-2026-72824

The Grav API plugin getgrav/grav-plugin-api before 1.0.13 contains an API key scope-cap bypass in PagesController::guardTwigContent. The Twig-toggle check uses a bare isSuperAdmin gate that does not consult apikeyscopes, so a least-privilege API key scoped only to api.pages.write and minted on a...

CVE-2026-72824 Grav before 1.0.13 API Key Scope Bypass via PagesController

The Grav API plugin getgrav/grav-plugin-api before 1.0.13 contains an API key scope-cap bypass in PagesController::guardTwigContent. The Twig-toggle check uses a bare isSuperAdmin gate that does not consult apikeyscopes, so a least-privilege API key scoped only to api.pages.write and minted on a...

GO-2026-4512 vulnerabilities

Vulnerabilities for packages: commercial-expanso-edge, nuclei...

GO-2025-3764 vulnerabilities

Vulnerabilities for packages: nuclei...

GO-2025-3638 vulnerabilities

Vulnerabilities for packages: nuclei...

GO-2026-4509 vulnerabilities

Vulnerabilities for packages: nuclei...

GO-2025-3638 vulnerabilities

Vulnerabilities for packages: nuclei...

GO-2025-3764 vulnerabilities

Vulnerabilities for packages: nuclei...

GO-2025-3955 vulnerabilities

Vulnerabilities for packages: nuclei, fzf, steampipe, azure-service-operator, guac, timescaledb-tune, flux, gobuster, grafana-alloy, prometheus, dive, terraform, libnvidia-container, clickhouse-operator, mongo-tools, headlamp, terraform-provider-azapi, cilium-cli, ko, aws-eks-pod-identity-agent,...

html/template: golang: Go html/template: Cross-Site Scripting via pathological input

A flaw was found in the html/template component of Go golang. Pathological inputs could prematurely close an unescaped forward slash '/', allowing an attacker to inject arbitrary content. This could lead to Cross-Site Scripting XSS, where malicious scripts are executed in a user's browser,...

html/template: golang: Go html/template: Cross-Site Scripting via pathological input

A flaw was found in the html/template component of Go golang. Pathological inputs could prematurely close an unescaped forward slash '/', allowing an attacker to inject arbitrary content. This could lead to Cross-Site Scripting XSS, where malicious scripts are executed in a user's browser,...

CVE-2026-72827: Improper Neutralization of Special Elements Used in a Template Engine

Grav CMS before 2.0.13 contains a server-side template injection vulnerability in email-action parameters that allows low-privileged page editors to execute arbitrary operating-system commands. Attackers can inject Twig payloads using the unsandboxed find filter in email subject, body, to, or fro...

PT-2026-71996

Grav CMS before 2.0.13 contains a server-side template injection vulnerability in email-action parameters that allows low-privileged page editors to execute arbitrary operating-system commands. Attackers can inject Twig payloads using the unsandboxed find filter in email subject, body, to, or fro...

The vulnerability of the `jinja2.Template()` function in the `api/core/helper/code_executor/jinja2/jinja2_transformer.py` file, a Jinja2 platform for application development by Dify, allows a malicious actor to execute arbitrary code.

The vulnerability of the jinja2.Template function in the api/core/helper/codeexecutor/jinja2/jinja2transformer.py file, a Jinja2 template processor for Dify application development, is related to the lack of measures taken to eliminate special elements in the template creation mechanism. Exploiti...

CVE-2026-46439: Improper Control of Generation of Code

compliance-trestle is a tooling platform for managing compliance as code. Versions prior to 3.12.2 and 4.0.3 have a Server-Side Template Injection SSTI vulnerability exists in the trestle author jinja command. The command recursively evaluates rendered templates, allowing an attacker to achieve...

CVE-2026-56858 Fix Javascript regexp context tracking in html/template

Previously, pathological inputs could close an unescaped '/' early, allowing for attack-controlled data to inject arbitrary content, potentially leading to XSS...

CVE-2026-56858

The golang project (specifically the html/template package) contains a vulnerability where pathological inputs can cause an unescaped '/' to close early. This flaw allows attackers to inject arbitrary content into templates, potentially resulting in Cross-Site Scripting (XSS) . This issue affects...

CVE-2026-56858 Fix Javascript regexp context tracking in html/template

Previously, pathological inputs could close an unescaped '/' early, allowing for attack-controlled data to inject arbitrary content, potentially leading to XSS...

GO-2026-6091 Fix Javascript regexp context tracking in html/template

Previously, pathological inputs could close an unescaped '/' early, allowing for attack-controlled data to inject arbitrary content, potentially leading to XSS...