CWE-1336: Server-Side Template Injection / SSTI
The product uses a template engine to insert or process externally-influenced input, but it does not neutralize or incorrectly neutralizes special elements or syntax that can be interpreted as template expressions or other code directives when processed by the engine.
Also known as Improper Neutralization of Special Elements Used in a Template Engine, Client-Side Template Injection / CSTI.
A kind of CWE-94 Improper Control of Generation of Code.
From the CWE List. © The MITRE Corporation.
Newest
org.jdbi:jdbi3-freemarkerMavenjdbi3-freemarker Vulnerable to Improper Neutralization of Special Elements Used in FreeMarker Template Engine7.5 High- thymeleafThymeleaf: Improper recognition of unauthorized syntax patterns in sandboxed Thymeleaf expressions9.0 Critical
- astrbotdevs astrbotAstrBotDevs AstrBot Dashboard API t2i.py create_template special elements used in a template engine5.1 Medium
- berriai litellm, red hat exploit intelligence, ansible automation platform 2 +1 more +3 moreLiteLLM: Server-Side Template Injection in /prompts/test endpoint8.6 High
- mintplexlabs anythingllm, mintplex-labs anything-llm +1 moreAnythingLLM vulnerable to stored DOM XSS in chart caption renderer - LLM-driven prompt injection produces executable HTML via unsanitized renderMarkdown(content.caption) in Chartable component5.4 Medium
- getkirby kirbyKirby has Server-Side Template Injection (SSTI) via double template resolution in option rendering7.6 High
- jetbrains youtrackIn JetBrains YouTrack before 2025.3.131383 high privileged user can achieve RCE via sandbox bypass7.2 High
- home-assistant-ecosystem home assistant command-line interface, home-assistant-cli +1 morehass-cli: Handling of user-supplied Jinja2 templates5.6 Medium
- thymeleaf, red hat build of apache camel for spring boot 4, fuse 7 +7 more +9 moreImproper neutralization of specific syntax patterns for unauthorized expressions in Thymeleaf9.1 Critical
- thymeleaf, red hat build of apache camel for spring boot 4, fuse 7 +7 more +9 moreImproper restriction of the scope of accessible objects in Thymeleaf expressions9.1 Critical
- giskard, giskard-ai giskard-oss +1 moreGiskard has an Unsandboxed Jinja2 Template Rendering in ConformityCheck5.4 Medium
- sanluan publiccmsSanluan PublicCMS FreeMarker Template AbstractFreemarkerView.java AbstractFreemarkerView.doRender special elements used in a template engine5.1 Medium
- citeum openctiOpenCTI affected by RCE via notifier template9.1 Critical
- langchain-ai langchain, langchain core +1 moreLangChain has incomplete f-string validation in prompt templates5.3 Medium
- inventreeInvenTree has SSTI in PART_NAME_FORMAT bypasses CVE-2026-27629 fix via {% if part.pk %} sandbox escape5.5 Medium
- zammadZammad has a server-side template injection leading to RCE via AI Agent8.7 High
- glpi-project glpiGLPI has a Server-Side Template Injection via Double-Compilation9.1 Critical
- antaresmugisho pybladeAntaresMugisho PyBlade AST Validation sandbox.py _is_safe_ast special elements used in a template engine5.3 Medium
- bentomlBentoML has a Server-Side Template Injection via unsandboxed Jinja2 Environment in Dockerfile generation8.8 High
- infiniflow ragflowRAGFlow: Server-Side Template Injection (SSTI) leading to Remote Code Execution (RCE) in Agent "Text Processing" Component8.7 High
- frentix openolatOpenOLAT: Server-Side Template Injection (SSTI) in Velocity templates allows Remote Code Execution8.8 High
- zcashfoundation zebra, zebra-chain +1 moreZebra node crash — V5 transaction hash panic (P2P reachable)9.2 Critical
- giskard giskard-agent, giskard-agents, giskard-ai giskard-oss +2 moreGiskard Agents have Server-side template injection via ChatWorkflow.chat() using non-sandboxed Jinja2 Environment7.7 High
- hkuds nanobotZero-Click Indirect Prompt Injection and Authentication Bypass via Email Polling8.9 High
- linuxcontainers incusIncus vulnerable to arbitrary file read and write through pongo templates10.0 Critical
- uptime.kuma uptime kuma, louislam uptime-kuma +1 moreUptime Kuma: SSTI in Notification Templates Allows Arbitrary File Read (Incomplete Fix for GHSA-vffh-c9pq-4crh)6.5 Medium
- dynaconfdynaconf Affected by Remote Code Execution (RCE) via Insecure Template Evaluation in @jinja Resolver7.5 High
- craftcms webhooksRCE via SSTI for users with permissions to access the Craft CMS Webhooks plugin8.5 High
- fit2cloud jumpserverJumpServer has a Server-Side Template Injection Leading to RCE via YAML Rendering6.8 Medium
- beghelli sicuroweb (sicuro24), gvectors wpdiscuz +1 moreBeghelli Sicuro24 SicuroWeb AngularJS Template Injection5.1 Medium
- 1024-lab smartadmin1024-lab/lab1024 SmartAdmin FreeMarker Template MailService.java freemarkerResolverContent special elements used in a template engine5.3 Medium
- opencartOpenCart Incomplete Fix CVE-2024-36694 template.php save special elements used in a template engine5.1 Medium
- craftcms cms, craft cms +1 moreCraft is affected by potential authenticated Remote Code Execution via Twig SSTI8.6 High
- craftcms cms, craft cms +1 moreCraft has a Twig Function Blocklist Bypass9.4 Critical
- craftcms cms, craft cms +1 moreCraft Affected by Authenticated RCE via "craft.app.fs.write()" in Twig Templates9.4 Critical
- craftcms cms, craft cms +1 moreCraft affected by authenticated RCE via Twig SSTI - create() function + Symfony Process gadget7.5 High
- elastic kibanaImproper Neutralization of Special Elements Used in a Template Engine in Kibana Workflows Leading to Server-Side Request Forgery (SSRF)8.6 High
- agenta-ai agentaAgenta's Server-Side Template Injection (SSTI) via custom evaluator Jinja2 templates allows RCE8.8 High
- jugmac00 flask-reuploadedFlask-Reuploaded vulnerable to Remote Code Execution via Server-Side Template Injection9.8 Critical
- inventreeInvenTree Vulnerable to Server Side Template Injection (SSTI)5.9 Medium
- datapizza ai, datapizza-labs datapizza-ai +1 moredatapizza-labs datapizza-ai Jinja2 Template prompt.py ChatPromptTemplate special elements used in a template engine5.1 Medium
- metabaseMetabase: Server-Side Template Injection via Notifications Endpoint Leads to RCE7.7 High
- wso2 identity serverServer-Side Template Injection via Velocity Template Engine in Multiple WSO2 Products Allows Remote Code Execution8.4 High
- gitlab ai gatewayImproper Neutralization of Special Elements Used in a Template Engine in GitLab AI Gateway9.9 Critical
- calibre-ebook calibreCalibre Affected by Arbitrary Code Execution via Server-Side Template Injection in Calibre HTML Export7.8 High
- hubspot jinjavaJinJava Bypass through ForTag leads to Arbitrary Java Execution9.8 Critical
- amidaware tactical rmmA Server-Side Template Injection (SSTI) vulnerability in the /reporting/templates/preview/...8.8 High
- dell data protection advisorDell Data Protection Advisor, versions prior to 19.12, contains an Improper Neutralization of...4.3 Medium
- opensagres xdocreportXDocReport affected by a Server-Side Template Injection (SSTI) vulnerability9.8 Critical
- kimaiKimai Vulnerable to Authenticated Server-Side Template Injection (SSTI)6.8 Medium
- Show moreLoading…