14747 matches found
CVE-2025-62426
A vulnerability in vLLM allows an authenticated user to trigger unintended tokenization during chat template processing by supplying crafted chattemplatekwargs to the /v1/chat/completions or /tokenize endpoints. By forcing the server to tokenize very large inputs, an attacker can block the API...
EUVD-2025-199351
Malicious code in vf-oss-template npm...
Malicious code in vf-oss-template (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d103d87bdd4b4e74f7f65f5726dc9eac4871a42a7298a619c317e9931c42aa84 The package vf-oss-template was found to contain malicious code. Source: google-open-source-security...
MAL-2025-191447 Malicious code in vf-oss-template (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d103d87bdd4b4e74f7f65f5726dc9eac4871a42a7298a619c317e9931c42aa84 The package vf-oss-template was found to contain malicious code. Source: google-open-source-security...
EUVD-2025-199344
Malicious code in @accordproject/template-engine npm...
Malicious code in @accordproject/template-engine (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9523084c03eecff384f8441a619316a1459bbd50b076f93f0c0175db405a2c4f The package @accordproject/template-engine was found to contain malicious code. Source: ghsa-malware...
MAL-2025-191177 Malicious code in @accordproject/template-engine (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9523084c03eecff384f8441a619316a1459bbd50b076f93f0c0175db405a2c4f The package @accordproject/template-engine was found to contain malicious code. Source: ghsa-malware...
CVE-2025-64050
A Remote Code Execution RCE vulnerability in the template management component in REDAXO CMS 5.20.0 allows remote authenticated administrators to execute arbitrary operating system commands by injecting PHP code into an active template. The payload is executed when visitors access frontend pages...
PT-2025-48077
Name of the Vulnerable Software and Affected Versions Contao versions 4.0.0 through 4.13.56 Contao versions 5.3.0 through 5.3.41 Contao versions 5.6.0 through 5.6.4 Description Backend users with control over template closures can execute arbitrary PHP functions without required parameters. The...
PT-2025-48038
Name of the Vulnerable Software and Affected Versions REDAXO CMS version 5.20.0 Description A Remote Code Execution RCE issue exists in the template management component of REDAXO CMS. A remote, authenticated administrator can execute arbitrary operating system commands by injecting PHP code into...
CVE-2025-64050
The CVE describes a Remote Code Execution in REDAXO CMS (v5.20.0) tied to the template management component. An authenticated administrator can inject PHP code into an active template, leading to command execution when frontend pages render the compromised template. Impact is high (CVE metrics sh...
Unity Linux 20.1050a / 20.1060a / 20.1070a Security Update: gnutls (UTSA-2025-990961)
The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-990961 advisory. A heap-buffer-overflow off-by-one flaw was found in the GnuTLS software in the template parsing logic within the certtool utility. When it reads certain settings fro...
PT-2025-48078
Name of the Vulnerable Software and Affected Versions Contao versions 4.0.0 through 4.13.56 Contao versions 5.3.0 through 5.3.41 Contao versions 5.6.0 through 5.6.4 Description Contao is susceptible to code injection within template output, potentially leading to code execution in both the front...
@accordproject/template-engine contains malware after npm account takeover
On November 24th 2025, a new supply chain attack called Shai-Hulud 2.0 was launched. This package contains the malicious code that attempts to harvest credentials and infect GitHub and npm repositories. The malicious software executes during the pre-install phase and attempts to harvest credentia...
CVE-2025-64050
A Remote Code Execution RCE vulnerability in the template management component in REDAXO CMS 5.20.0 allows remote authenticated administrators to execute arbitrary operating system commands by injecting PHP code into an active template. The payload is executed when visitors access frontend pages...
Contao 安全漏洞
Contao is an open source Content Management System CMS developed in PHP by Contao Open Source. The system supports search engines, rights management and CSS frameworks. A security vulnerability exists in Contao versions 4.0.0 through 4.13.57 prior, 5.3.42 prior, and 5.6.5 prior, which stems from ...
CVE-2025-64050
A Remote Code Execution RCE vulnerability in the template management component in REDAXO CMS 5.20.0 allows remote authenticated administrators to execute arbitrary operating system commands by injecting PHP code into an active template. The payload is executed when visitors access frontend pages...
REDAXO 安全漏洞
REDAXO is a content management system from REDAXO open source. A security vulnerability exists in REDAXO version 5.20.0, which stems from a template management component that allows injection of PHP code, potentially leading to remote code execution...
Malicious code in express-starter-template (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7f7f0e424be1b6e1710d9f2670a4a9b6fbc48636560f8af2025d15de19f01e03 The package express-starter-template was found to contain malicious code. Source: ghsa-malware...