CVE-2026-65974 is a critical vulnerability in ERPNext, an open source ERP tool. Prior to versions 15.111.0 and 16.22.0, authenticated users with limited permissions can bypass permission boundaries due to unsafe exposure of frappe.render_template without restrict_globals. This leads to server-side template injection and remote code execution. The issue is fixed in versions 15.111.0 and 16.22.0.
compliance-trestle is a tooling platform for managing compliance as code. Versions prior to 3.12.2 and 4.0.3 have a Server-Side Template Injection (SSTI) vulnerability exists in the `trestle author jinja` command. The command recursively evaluates rendered templates, allowing an attacker to achieve arbitrary command execution with privileges of the running process by injecting malicious payloads into data fields (such as SSP documents or Lookup Tables). The vulnerability does not require attacker control of the template itself. Only attacker-controlled input data rendered into a trusted template is required. This distinction is critical: the template author may only intend to render plain text (e.g., `Title: {{ ssp.metadata.title }}`), but because of the recursive parsing, the data field itself becomes executable. The vulnerability is caused by recursive re-compilation and re-rendering of already-rendered output. Versions 3.12.3 and 4.0.3 patch the issue.
CVE-2026-13051 is a critical vulnerability in Form::Processor::Field::HtmlArea for Perl versions 0.06 through 1.162360. It allows attackers to cause resource exhaustion or execute attacker-controlled method dispatch via crafted HTML::Tidy diagnostic messages used as Locale::Maketext templates. This can lead to unhandled exceptions or arbitrary memory allocation during form validation. Other field types are not affected as they handle templates differently.
Oh My Posh is the most customisable and low-latency cross platform/shell prompt renderer. Prior to 29.35.1, the setStyle() function in src/segments/path.go passed pt.Path, which includes raw folder names, to template.Render, whose function map exposes cmd, so an attacker-controlled directory name containing a Go template expression could execute arbitrary operating system commands as the current user whenever the prompt rendered inside that directory or a descendant. This issue is fixed in version 29.35.1.
Prompty is a markdown file format (.prompty) for LLM prompts. Prior to 0.1.5 and 2.0.0-beta.5, the TypeScript Nunjucks renderer evaluated untrusted .prompty template bodies with unrestricted JavaScript member access. An attacker-controlled template could traverse constructor and prototype properties to execute JavaScript in the host Node.js process. This issue is fixed in versions 0.1.5 and 2.0.0-beta.5.
ERPNext is a free and open source Enterprise Resource Planning tool. Prior to 15.118.0 and 16.29.0, the validate_template and render_template calls in erpnext/accounts/doctype/process_statement_of_accounts/process_statement_of_accounts.py render subject, body, and pdf_name fields with unrestricted globals including frappe.utils, allowing an authenticated user with a common operational role to inject template expressions, execute arbitrary server-side code, and read data across the application. This issue is fixed in versions 15.118.0 and 16.29.0.
CTI-Transmute contains a stored cross-site scripting vulnerability caused by insufficient neutralization of Vue template expression delimiters in server-rendered user-controlled data.
An unauthenticated attacker can create a public conversion whose name or description contains a malicious Vue expression using the application's configured [[ ... ]] delimiters. User profile names may provide an additional injection vector. Although Jinja HTML escaping is applied, the resulting value is subsequently included in a DOM region compiled by Vue.
Vue interprets the attacker-controlled value as a template expression rather than ordinary text. By accessing the JavaScript Function constructor from within the expression, an attacker can execute arbitrary JavaScript in the security context of the CTI-Transmute origin. The application's nonce-based Content Security Policy does not prevent exploitation because the Vue runtime compiler requires the unsafe-eval policy exception.
The malicious payload is stored by the application and executed whenever another user opens an affected page, such as the public conversion detail page. The victim may be a normal user or an administrator. Successful exploitation could allow the attacker to:
* Access data available to the victim through the application.
* Extract API keys, tokens, or other sensitive information exposed to the page.
* Perform authenticated actions using the victim's session.
* Modify conversions or other application data.
* Escalate the impact by targeting an administrator.
A demonstrated payload can use [].constructor.constructor(...) to obtain the JavaScript Function constructor and execute arbitrary code. The regression tests also show that a short first-stage payload could retrieve an uncapped conversion description and evaluate a larger second-stage payload.
The patch addresses the vulnerability by registering a global Jinja finalize hook that inserts a zero-width Unicode word joiner inside every Vue delimiter found in server-rendered values. This prevents Vue from recognizing the values as template expressions while preserving their visible representation.
CVE-2026-5336 is a vulnerability in the DataPress (Dataverse Integration) WordPress plugin before version 2.91. It improperly restricts access to its template rendering feature, allowing users with Contributor roles to disclose sensitive information such as session cookies of higher privileged users who view the affected content. This can lead to unauthorized data disclosure and potential privilege escalation.
Bolt CMS renders content field values through Twig's full application-level Environment with no SandboxExtension registered anywhere in the codebase. In src/Entity/Field.php, getTwigValue calls shouldBeRenderedAsTwig, which gates rendering only on the field definition's allow_twig flag and a regex checking for , , or ; when true, the raw field value is compiled and rendered via with no sandboxing.
The render-template component of ember-dynamic-render-template (addon/components/render-template.js) passes its property directly into Ember/Glimmer's compileTemplate (from @ember/template-compilation) with no sanitization, allow-listing, or validation of the input.
DjangoCRM's massmail module renders user-controlled EmlMessage fields (subject, content) through Django's Template constructor with no sanitization, in at least three locations: message_previews.py builds an f-string embedding message.subject/message.content directly into a Template call; email_creators.py passes eml_message.subject directly as a template string to Template; and helpers.py contains the same f-string interpolation pattern.
Adobe Campaign Classic (ACC) is affected by an Improper Neutralization of Special Elements Used in a Template Engine vulnerability that could result in arbitrary code execution in the context of the current user. An attacker could exploit this vulnerability to execute arbitrary code. Exploitation of this issue does not require user interaction. Scope is changed.
CVE-2026-54666 is a high-severity vulnerability in swagger-typescript-api prior to version 13.12.2. The issue arises because OpenAPI path keys are passed into JavaScript template literals without proper escaping, allowing attacker-controlled input containing ${...} to be executed when the generated API client method is called. This improper neutralization of special elements leads to potential code injection. The vulnerability is fixed in version 13.12.2.
CVE-2026-54664 is a high severity code injection vulnerability in the swagger-typescript-api tool prior to version 13.12.2. The vulnerability arises because enum values from an OpenAPI specification are passed without proper escaping to template rendering code, allowing attacker-controlled input to inject executable code into generated TypeScript modules. This code executes when the generated module is imported. The issue is fixed in version 13.12.2.
swagger-typescript-api generates API clients for Fetch or Axios from an OpenAPI Specification. Prior to 13.12.2, templates/base/http-clients/axios-http-client.ejs interpolates servers[0].url from src/code-gen-process.ts into the HttpClient constructor without escaping, allowing an attacker-controlled OpenAPI spec to inject code that executes when new HttpClient() or new Api() is constructed. This issue is fixed in version 13.12.2.
swagger-typescript-api generates API clients for Fetch or Axios from OpenAPI specifications. Prior to 13.12.2, src/code-gen-process.ts createApiConfig copies servers[0].url into apiConfig.baseUrl, and templates/base/http-clients/fetch-http-client.ejs interpolates apiConfig.baseUrl into the generated HttpClient baseUrl field without escaping, allowing an attacker-controlled OpenAPI spec to inject TypeScript static field code that executes when the generated fetch client module is imported. This issue is fixed in version 13.12.2.
A Server-Side Template Injection (SSTI) vulnerability was identified
in the mail template functionality of the Axway SecureTransport product in version 5.5-20260326. This
flaw
allows an attacker with admin privileges to inject arbitrary Java code expressions, which are
executed server-side when the template is rendered (i.e., during email
sending). Successful exploitation of this flaw allows an attacker to
execute
arbitrary code on the server that results in full host compromise.
This issue affects all Axway SecureTransport versions prior 5.5-20260528 update.
CVE-2026-54653 is a high severity code injection vulnerability in koxudaxi's datamodel-code-generator affecting versions from 0.17.0 up to but not including 0.60.2. The tool generates Python models from various schema formats and improperly preserves attacker-controlled default_factory values, which are emitted into generated code. This allows execution of arbitrary Python expressions when the generated model is imported. The issue is fixed in version 0.60.2.
CVE-2026-54621 is a high-severity code injection vulnerability in koxudaxi's datamodel-code-generator prior to version 0.60.1. The vulnerability arises because GraphQL Union description values are rendered into Python comments without neutralizing carriage returns, allowing attacker-controlled schema content to inject executable Python code into generated models. This malicious code executes when the generated models are imported. The issue is fixed in version 0.60.1.
CVE-2026-54654 is a high-severity code injection vulnerability in koxudaxi's datamodel-code-generator affecting versions from 0.14.1 up to but not including 0.60.2. The issue arises because the --extra-template-data comment field is rendered into Python comments without neutralizing carriage returns, allowing attacker-controlled input to inject and execute arbitrary Python code when the generated models are imported. This vulnerability is fixed in version 0.60.2.