Catalog
Findings
Filter the merged record by severity, source, stack, and weakness type.
- Medium5.3BottleCRM through 1.14.5 contains a server-side template injection vulnerability in the send_email Celery task, which compiles the user-supplied AccountEmail message_b…Oct 14, 2026
- Critical10.0Adobe Commerce is affected by an Improper Neutralization of Special Elements Used in a Template Engine vulnerability that could result in arbitrary code execution in t…EPSS 0.8%Oct 13, 2026
- High8.7Frappe ERPNext before 15.119.1 and 16.x before 16.32.0 contains a server-side template injection vulnerability because user-controlled message fields are not validated…EPSS 0.3%Oct 12, 2026
- High8.8Backstage is an open framework for building developer portals.EPSS 1.2%Sep 16, 2026
- Medium5.1A template injection vulnerability was discovered in the Dashboards functionality due to improper validation of an input parameter.Sep 8, 2026
- Critical10.0Adobe Commerce and Magento Improper Neutralization of Special Elements Used in a Template Engine VulnerabilityKEVEPSS 3.9%Sep 7, 2026
- High8.6Trilium is an open-source hierarchical note-taking application.EPSS 0.7%Aug 27, 2026
- Medium5.1An Angular template injection vulnerability was discovered in the Reports functionality due to improper validation of an input parameter.EPSS 0.2%May 19, 2026
- Medium6.5Improper Neutralization of Special Elements Used in a Template Engine vulnerability in Apache OFBiz.EPSS 0.6%May 19, 2026
- High8.8A Server-Side Template Injection (SSTI) vulnerability exists in the Frappe ERPNext through 15.89.0 Print Format rendering mechanism.EPSS 0.5%Dec 15, 2025
- High8.8An SSTI (Server-Side Template Injection) vulnerability exists in the get_address_display method of Frappe ERPNext through 15.89.0.EPSS 0.6%Dec 15, 2025
- Medium4.3An SSTI (Server-Side Template Injection) vulnerability exists in the get_terms_and_conditions method of Frappe ERPNext through 15.89.0.EPSS 0.3%Dec 15, 2025
- Medium4.3An SSTI (Server-Side Template Injection) vulnerability exists in the get_contract_template method of Frappe ERPNext through 15.89.0.EPSS 0.3%Dec 15, 2025
- High8.8An SSTI (Server-Side Template Injection) vulnerability exists in the get_dunning_letter_text method of Frappe ERPNext through 15.89.0.EPSS 0.6%Dec 15, 2025
- Critical9.8Rejetto HTTP File Server Improper Neutralization of Special Elements Used in a Template Engine VulnerabilityKEVEPSS 99.5%May 31, 2024
- Critical10.0CrushFTP VFS Sandbox Escape VulnerabilityKEVEPSS 99.5%Apr 22, 2024
16 records · page 1 of 1
PreviousNext