CWE-95: Eval Injection
The product receives input from an upstream component, but it does not neutralize or incorrectly neutralizes code syntax before using the input in a dynamic evaluation call (e.g. "eval").
Also known as Improper Neutralization of Directives in Dynamically Evaluated Code.
A kind of CWE-94 Improper Control of Generation of Code.
From the CWE List. © The MITRE Corporation.
Newest
- bytedance verlByteDance verl grader.py math_equal sandbox6.3 Medium
- pagekit cmsPagekit CMS StringStorage Template PhpEngine.php evaluate eval injection5.1 Medium
- owasp bltOWASP BLT has RCE in Github Actions via untrusted Django model execution in workflow8.8 High
- 1panel-dev maxkbStored XSS via Eval Injection in EchartsRander Component6.9 Medium
- chamilo lms, chamilo-lms +1 moreChamilo LMS Affected by Remote Code Execution via eval() in Platform Settings8.8 High
- deepwisdom metagptFoundationAgents MetaGPT XML action_node.py ActionNode.xml_fill eval injection6.9 Medium
- rapid7 insight agentEval Injection in Rapid7 Insight Agent6.6 Medium
- dolibarr erp/crm, erp\/crm +1 moreDolibarr ERP/CRM < 23.0.2 Authenticated RCE via dol_eval_standard()8.6 High
- agnoAgno < 2.3.24 field_type Eval Injection Arbitrary Code Execution9.3 Critical
- tautulliTautulli: RCE via eval() sandbox bypass using lambda nested scope to escape co_names whitelist check7.5 High
- casiano grid::machine, grid\ +1 moreGRID::Machine versions through 0.127 for Perl allows arbitrary code execution via unsafe deserialization9.8 Critical
- lettaletta-ai letta Incomplete Fix CVE-2025-6101 ast_parsers.py resolve_type eval injection6.9 Medium
- acowebs woocommerce custom product addons proWoocommerce Custom Product Addons Pro <= 5.4.1 - Unauthenticated Remote Code Execution via Custom Pricing Formula9.8 Critical
- langflowLangflow has Unauthenticated Remote Code Execution via Public Flow Build Endpoint9.3 Critical
- siemens simatic drive controller cpu 1504d tf, simatic drive controller cpu 1507d tf, simatic et 200sp cpu 1510sp f-1 pn +100 more +102 moreAffected devices do not properly sanitize contents of trace files. This could allow an attacker...9.4 Critical
- locutus, red hat logging subsystem for red hat openshift +1 moreLocutus: Remote Code Execution (RCE) in locutus call_user_func_array due to Code Injection8.1 High
- chamilo chamilo-lms, lms +1 moreChamilo: Evaluation of untrusted user input leads to Remote Code Execution9.8 Critical
- openstack vitrageOpenStack Vitrage: Unauthorized Access to the Host can Lead to Eval Injection9.1 Critical
- n8nn8n has Unauthenticated Expression Evaluation via Form Node9.5 Critical
- budibaseBudibase Vulnerable to Remote Code Execution via Unsafe eval() in View Filter Map Function (Budibase Cloud)9.9 Critical
- mmaitre314 picklescanpicklescan - Scanning Bypass via Dynamic Eval in scan_pytorch7.1 High
- tp link systems inc. tl-wr845n v4, tl-wr850n v3, tp-link systems inc. archer mr200 v5.2 +6 more +8 moreLAN Code Execution on TP-Link Archer MR200, Archer C20, TL-WR850N and TL-WR845N5.9 Medium
- php fusion fusion, php-fusion phpfusion +1 morePHP-Fusion 9.03.50 - 'panels.php' Eval Injection8.6 High
- nvm-sh nvmCommand Injection in nvm via NVM_AUTH_HEADER in wget code path5.4 Medium
- n8nAuthenticated users can bypass the Expression sandbox mechanism to achieve full remote code execution on n8n’s main node.9.9 Critical
- dioxuslabs componentsDioxus Components has JavaScript injection via user-supplied IDs5.3 Medium
- langflowLangflow eval_custom_component_code Eval Injection Remote Code Execution Vulnerability9.8 Critical
- alchemy-cms alchemy cmsAlchemyCMS has Authenticated Remote Code Execution (RCE) via eval injection in ResourcesHelper6.4 Medium
- n8nSandbox escape in n8n Python task runner allows for arbitrary code execution on the underlying host.8.5 High
- openc3 cosmosUnauthenticated Remote Code Execution in openc3-api10.0 Critical
- xspeeder sxzosXspeeder SXZOS through 2025-12-26 allows root remote code execution via base64-encoded Python...10.0 Critical
- apple macosAn injection issue was addressed with improved validation. This issue is fixed in macOS Tahoe 26...5.5 Medium
- apple macosAn injection issue was addressed with improved validation. This issue is fixed in macOS Tahoe 26...5.5 Medium
- cloudlinux ai-bolitAn eval injection in the malware de-obfuscation routines of CloudLinux ai-bolit before v32.7.4...8.8 High
- xwiki xwiki-renderingXWiki vulnerable to remote code execution through insufficient protection against {{/html}} injection8.7 High
- simple sa wirtualna uczelniaRCE in Wirtualna Uczelnia9.3 Critical
- openwebui open webui, open-webui +1 moreOpen WebUI Affected by an External Model Server (Direct Connections) Code Injection via SSE Events7.3 High
- f5 f5os-a, f5os-c, f5os - appliance +1 more +3 moreF5OS vulnerability8.5 High
- is-human wordpress plugin wordpress pluginWordPress Plugin is-human <= v1.4.2 Eval Injection RCE9.3 Critical
- horillaHorilla vulnerable to authenticated RCE via eval() in project_bulk_archive7.2 High
- xwiki pro macros, xwikisas xwiki-pro-macros +1 moreXWiki Remote Macros vulnerable to remote code execution using the panel macro10.0 Critical
- xwiki pro macros, xwikisas xwiki-pro-macros +1 moreXWiki Remote Macros vulnerable to remote code execution from width parameter in the column macro10.0 Critical
- xwiki-contrib application-blogXWiki Blog Application: Privilege Escalation (PR) from account through blog content8.7 High
- mmaitre314 picklescanpicklescan - Remote Code Execution via Undetected idlelib.calltip.Calltip.fetch_tip7.6 High
- totolink a3002r firmwareTOTOLINK A3002R v4.0.0-B20230531.1404 was discovered to contain an eval injection vulnerability...6.5 Medium
flowisenpmUnintended dynamic code execution leads to remote code execution by network attackers9.8 Critical- cyberlord92 employee directory – staff directory and listing, emarket-design campus directory – faculty, staff & student directory plugin for wordpress, customer support ticket system & helpdesk plugin for wordpress +5 more +7 moreMultiple Plugins by emarket-design <= Multiple Versions - Unauthenticated Limited Remote Code Execution8.1 High
- php-chartsPHP-Charts v1.0 PHP Code Execution10.0 Critical
- instantcmsInstantCMS <= 1.6 Remote PHP Code Execution9.3 Critical
- open source robotics foundation robot operating system (ros), openrobotics robot operating system +1 moreUnsafe use of eval() method in rosbag tool7.8 High
- Show moreLoading…