An Improper Neutralization of Special Elements Used in a Template Engine (CWE-1336) vulnerability exists in org.jdbi:jdbi3-freemarker through version 3.52.1. This flaw allows arbitrary command execution when attacker-controlled text reaches the FreeMarker template engine via jdbi3-freemarker's SQL templating. The vulnerability arises because the FreeMarker configuration used does not restrict reflective Java class instantiation, enabling exploitation through the ?new built-in. The issue is fixed in version 3.53.0.