Improper neutralization of special elements used in a template engine in the CDK generator in Amazon awslabs.dynamodb-mcp-server before 2.1.6 might allow a context-dependent actor to execute arbitrary code on the host that deploys the generated application via crafted table, index, or attribute names in a data model file.
IBM Verify Identity Access Advanced Access Control versions 10.0.0 and 11.0.0 contain a vulnerability classified as CWE-1336, involving improper neutralization of special elements used in a template engine. This flaw may allow an attacker to perform an information disclosure attack. The vulnerability has a high severity rating with a CVSS score of 7.5, indicating it can be exploited remotely without privileges or user interaction, resulting in high confidentiality impact but no integrity or availability impact. No patch or remediation details are currently provided.
A security vulnerability was discovered in Fleet's Helm template preprocessing where templates evaluated by the Fleet controller could reach network resources outside the management cluster. A user who can supply bundle content to a repository referenced by a `GitRepo` resource can cause the Fleet controller to:
- Disclose cluster metadata available to the templating context.
- Reveal information about hosts reachable from the controller's network position.
Because the disclosure channel is name resolution, it may remain effective in environments where outbound traffic is otherwise restricted. The disclosed information is limited to values exposed to the Fleet templating context and to name resolution results. Integrity and availability of managed clusters are not affected.
This issue affects Fleet:
from 0.12.0 before 0.12.19,
from 0.13.0 before 0.13.15,
from 0.14.0 before 0.14.10,
from 0.15.0 before 0.15.6, and
from 0.16.0 before 0.16.1.
In Eclipse Ditto versions [1.3.0, 3.9.6], the ImplicitThingCreationMessageMapper of the connectivity service builds a CreateThing command by substituting placeholder values (e.g. {{ header:device_id }}) resolved from inbound message headers into a pre-configured JSON "thing" template as raw, un-escaped strings, and then parses the resulting string as JSON. Because the placeholder engine performs no JSON escaping and is unaware of the surrounding JSON string context, a resolved value containing a double-quote character can break out of its string and inject additional JSON structure.
When a connection is configured to use this mapper with a template that reflects a header whose value a publishing device can control (for example an MQTT 5 user property, an AMQP 1.0 application property, or a Kafka record header), an attacker able to publish on that connection can inject an inline _policy object. The inline policy overrides the administrator-configured policyId, letting the attacker assign an arbitrary access-control policy to the newly created digital twin — gaining full read/write access to it and potentially revoking the legitimate owner's access, with no administrator interaction.
Exploitation requires all of the following: the connection uses the (non-default) ImplicitThingCreation mapper; its template reflects an attacker-controllable header; and, for the policy-override impact, the connection's authorization subjects are permitted to create policies (the default). Deployments that restrict the connection's subjects to thing creation only via the entity-creation configuration are not affected by the policy-override impact.
CVE-2026-54718 is a high-severity vulnerability in the Silverstripe Advanced Workflow module. It allows an attacker with permission to author email templates to inject a specially crafted server-side template payload. This payload is processed by the Silverstripe template engine SSTemplateParser, leading to PHP code evaluation and arbitrary code execution on the server. The vulnerability affects versions prior to 6.4.5, 7.1.3, and 7.2.1 and has been fixed in these versions.
Trilium is an open-source hierarchical note-taking application. In versions prior to 0.104.0, the default-on "Safe import" filter fails to neutralize the shareTemplate relation because that relation is not marked as dangerous, allowing an attacker-supplied import archive to plant a server-side template that leads to remote code execution. The relation is omitted from the built-in list of dangerous attributes, so unlike other code-loading relations it is not disabled on import, and when the victim later publishes the imported note the public share renderer feeds the linked EJS code note's raw bytes into ejs.render, which compiles them in the server's Node process. An unauthenticated request to the shared note then executes the attacker's JavaScript with full access to require, process, the filesystem, and the network. This issue is fixed in version 0.104.0.
Compliance-trestle versions prior to 3.12.4 and 4.0.0 through 4.0.3 contain a server-side template injection vulnerability due to improper handling of Jinja2 include tags. These tags re-parse included Markdown files as Jinja2 templates in a non-sandboxed environment, allowing arbitrary code execution. The issue is fixed in version 4.1.0.
CVE-2026-77129 is a high-severity vulnerability in the TYPO3 extension "Event management and registration." It allows a backend user with edit access to supply malicious Fluid ViewHelper syntax in an email subject field, which is passed directly into a Fluid template without restriction. This can lead to disclosure of sensitive data or execution of TypoScript content objects. Exploitation requires authenticated backend access with edit permissions to the event plugin or backend module.
A critical vulnerability (CVE-2026-77136) exists in the TYPO3 extension "powermail" where an attacker can submit malicious Fluid template syntax via a form field configured as the sender's name. This input is rendered without sanitization, allowing arbitrary Fluid ViewHelpers execution. Exploitation requires no authentication and can disclose sensitive server information or potentially enable remote code execution. The vulnerability affects multiple versions of the extension and is actively exploited in the wild.
CVE-2026-59989 is a critical code injection vulnerability in the Phalcon PHP framework's Volt template engine. In versions 5.15.0 and earlier, the resolveFilter function improperly inserts raw input into generated PHP code without proper sanitization, allowing an attacker who can control Volt template source to inject and execute arbitrary PHP code. This issue is fixed in version 5.16.0.
Orval generates type-safe JavaScript clients in TypeScript from OpenAPI v3 and Swagger v2 specifications. Prior to 8.21.0, an unescaped backtick in servers[0].url is emitted into request URL template literals generated when output.baseUrl.getBaseUrlFromSpecification is enabled without safe encoding. This permits attacker-controlled JavaScript to be evaluated when a generated request or URL-builder function is called, resulting in code execution in the developer, CI, test, or application environment. The affected code is packages/core/src/getters/route.ts function getFullRoute. This issue is fixed in version 8.21.0.
CVE-2026-72717 is a critical code injection vulnerability in orval-labs' orval tool that generates type-safe JavaScript clients from OpenAPI and Swagger specifications. Versions prior to 8.21.0 improperly handle ${...} expressions or backticks in schema defaults, allowing attacker-controlled JavaScript to be executed when the generated zod schema module is imported. This can lead to code execution in developer, CI, test, or application environments. The issue is fixed in version 8.21.0.
CVE-2026-71868 is a critical code injection vulnerability in orval-labs' orval tool prior to version 8.21.0. The vulnerability arises because unencoded ${...} expressions or backticks in enum default values are emitted directly into module-level template literals during zod schema generation, allowing attacker-controlled JavaScript code to be executed when the generated module is imported. This can lead to code execution in developer, CI, test, or application environments. The issue is fixed in version 8.21.0.
CVE-2026-71869 is a critical code injection vulnerability in orval-labs' orval software prior to version 8.21.0. The issue arises from unsafe encoding of ${...} expressions or backticks in array item defaults during zod schema generation, allowing attacker-controlled JavaScript to be executed when the generated module is imported. This can lead to code execution in developer, CI, test, or application environments. The vulnerability is fixed in version 8.21.0.
CVE-2026-71871 is a critical code injection vulnerability in orval-labs' orval tool that generates type-safe JavaScript clients from OpenAPI and Swagger specifications. Versions prior to 8.21.0 improperly handle default header parameter values containing ${...} expressions or backticks, embedding attacker-controlled JavaScript into generated zod schema modules. This leads to arbitrary code execution when the module is imported in developer, CI, test, or application environments. The issue is fixed in version 8.21.0.
Orval generates type-safe JavaScript clients in TypeScript from OpenAPI v3 and Swagger v2 specifications. Prior to 8.21.0, a ${...} expression or backtick in a query parameter default is emitted into a module-level template literal emitted by zod schema generation without safe encoding. This permits attacker-controlled JavaScript to be evaluated when the generated zod schema module is imported, resulting in code execution in the developer, CI, test, or application environment. The affected code is packages/zod/src/index.ts function formatDefaultValue. This issue is fixed in version 8.21.0.
CVE-2026-62681 is a critical code injection vulnerability in orval versions prior to 8.21.0. The issue arises because unescaped backticks in OpenAPI paths are directly embedded into JavaScript template literals used for generating request URLs in clients like axios, fetch, react-query, and SWR. This flaw allows attacker-controlled JavaScript code to be executed in environments where the generated code runs, such as developer machines, CI pipelines, test environments, or applications. The vulnerability is fixed in version 8.21.0.
CVE-2026-52889 is a critical vulnerability in the Formie plugin for Craft CMS versions prior to 3.1.27. It allows unauthenticated attackers to inject Twig template syntax into certain request-derived hidden field defaults, leading to server-side template evaluation. This can result in sensitive information disclosure, application state modification, or remote code execution. The issue is fixed in version 3.1.27.
CVE-2026-66613 is a critical vulnerability in JetEngine by Crocoblock. Jetimpex Inc. It allows unauthenticated remote code execution (RCE) in versions up to and including 3.8.14 due to improper neutralization of special elements in the template engine.
Interpretation of untrusted input in template engine in GBIF Integrated Publishing Toolkit versions before 3.3.4 allows remote authenticated attackers to access server-side files and state via template injection