CWE-95: Eval Injection
The product receives input from an upstream component, but it does not neutralize or incorrectly neutralizes code syntax before using the input in a dynamic evaluation call (e.g. "eval").
Also known as Improper Neutralization of Directives in Dynamically Evaluated Code.
A kind of CWE-94 Improper Control of Generation of Code.
From the CWE List. © The MITRE Corporation.
Newest
- orval-labs orvalOrval: Import-time RCE via schema property name -> computed-property-key injection in the zod client9.3 Critical
- freecadFreeCAD: Arbitrary Code Execution via eval() on untrusted project file metadata in BIM Workbench7.8 High
- freecadFreeCAD: Arbitrary Code Execution via eval() on untrusted SVG template scale field in BIM TechDraw Page7.8 High
- jahlives openssl encryptopenssl_encrypt before 1.4.0 Sandbox Escape via Type Hierarchy9.3 Critical
- tenable security centerRemote Code Execution9.4 Critical
- No product listedData::MuForm::Localizer versions through 0.05 for Perl execute Perl from a message catalog header, reached at an arbitrary path because load_lexicon interpolates the language attribute into the catalo…8.2 High
- flowiseai flowiseFlowise before 3.1.3 Sandbox Escape to RCE9.0 Critical
- flowiseai flowiseFlowise before 3.1.3 Remote Code Execution via Custom MCP9.0 Critical
- kovidgoyal calibrecalibre: Bypass of Python template restrictions via nested `template()` leading to RCE8.5 High
- faker-js fakerFaker: helpers.fake exploitable into arbritary code execution7.8 High
- lllyasviel fooocusFooocus webui vulnerable to Remote Code Execution9.3 Critical
- firecrawlFirecrawl: Arbitrary file read via JSON Schema $ref expansion9.3 Critical
- flowiseai flowiseFlowise: RCE via CSVAgent csvFile data URI base64 segment is interpolated into Python source without validation9.4 Critical
- flowiseai flowiseFlowise Sandbox Escape to RCE9.0 Critical
- perspective-dev perspectivePerspective 5.0.0 RCE via eval() Expression Injection8.7 High
- adobe campaign classic, campaign +1 moreAdobe Campaign Classic (ACC) | Improper Neutralization of Directives in Dynamically Evaluated Code ('Eval Injection') (CWE-95)9.6 Critical
- open-emr openemrOpenEMR 8.2.0 Remote Code Execution via CategoryTree eval() Injection9.4 Critical
- lmsys sglangCVE-2026-159719.8 Critical
- koxudaxi datamodel-code-generatordatamodel-code-generator vulnerable to code injection via `x-python-import` / `customTypePath` in generated import statements7.5 High
- wordpress wordpress-coding-standardsWordPress Coding Standards (WordPressCS) contains an arbitrary code execution vulnerability8.6 High
- vbulletinvBulletin < 6.2.2 Eval Injection RCE via vb5/template/runtime.php9.3 Critical
- nltk, ntlk +1 moreNLTK < 3.9.3 Eval Injection via collocations.py Command-Line Arguments8.5 High
- nlnetlabs net::dnsNet::DNS versions through 1.55 for Perl allow remote execution injection via EDNS EXTENDED ERROR9.8 Critical
django-haystackDebiandjango-haystack more_like_this Template Tag elasticsearch_backend.py _to_python eval injection5.1 Mediummantisbt/mantisbtPackagistMantisBT: Remote Code Execution via eval() Class Hoisting in adm_config_set.php8.6 High- mervinpraison praisonaiPraisonAI before 4.6.78 Code Injection via API deployment generator8.5 High
- diracgrid diracDIRAC: RCE in FileCatalog DatasetManager via SQL injection + eval9.9 Critical
- diracgrid diracDIRAC: RCE in RequestManager due to eval on untrusted input9.9 Critical
- perl dbiDBI versions before 1.650 for Perl are vulnerable to code injection via caller-influenced Profile8.8 High
- egroupwareAuthenticated RCE via Malicious eTemplate Upload in EGroupware8.6 High
- dokkuDokku: Host RCE via Maliciously Named OpenResty Include Files Injected Through eval9.0 Critical
- xwikisas xwiki-pro-macrosXWiki Pro Macros: excerpt-include title and content injection executes code9.9 Critical
- ibm langflow oss, langflow +1 moreUnauthenticated Remote Code Execution in Langflow OSS PythonREPLComponent via Builtins Injection10.0 Critical
- suse rancherCommand injection through unsanitized YAML parameter in Rancher9.4 Critical
io.karatelabs:karate-coreMavenKarate Mock Server RCE via embedded expression evaluation of request-derived data8.2 High- fgmacedo python statemachine, python-statemachine +1 morePython StateMachine 3.0.0 < 3.2.0 RCE via SCXML eval() Injection9.3 Critical
- vimVim: Arbitrary Code Execution via Python Omni-Completion7.3 High
- vimVim: Vimscript Code Injection in cucumber filetype plugin via crafted step-definition regex5.1 Medium
- shd101wyy crossnote, markdown preview enhanced +1 moreMarkdown Preview Enhanced 0.8.x Code Injection via WaveDrom Rendering8.4 High
- shd101wyy markdown preview enhancedMarkdown Preview Enhanced Arbitrary Code Execution via WaveDrom eval()8.6 High
- teltonika networks rutos, tswos +1 moreCommand injection in Profile change function8.4 High
- mervinpraison praisonaiPraisonAI's unauthenticated A2A official example can reach real LLM-driven `eval()` tool execution9.8 Critical
- spaceapplications yamcsYamcs: Remote Code Execution via Mission Database algorithm override9.8 Critical
- pmqs io::compress, red hat enterprise linux 10, enterprise linux 10.0 extended update support +17 more +19 moreIO::Compress versions before 2.220 for Perl can execute arbitrary code in File::GlobMapper via an attacker-controlled output glob7.3 High
- apache ofbizApache OFBiz: Improper Validation in traverseContent Service Enables Authenticated Groovy Code Execution8.8 High
- owasp-blt bltOWASP BLT: pre-commit-fix.yaml executes untrusted fork code via pull_request_target8.8 High
- peerigon angular-expressionsAngular Expressions - Remote Code Execution using filters9.3 Critical
- No product listedThe flash-attention project thru commit e724e2588cbe754beb97cf7c011b5e7e34119e62 (2025-13-04)...7.3 High
- seppmail ag secure email gatewayUnauthenticated Remote Code Execution9.3 Critical
- icip-cas pptagentPPTAgent: Arbitrary Code Execution via Python eval() of LLM-Generated Code with Builtins in Scope8.6 High
- Show moreLoading…