document-merge-service vulnerabilities (PyPI)

2 vulnerabilities.

• document-merge-service PyPI Document Merge Service vulnerable to RCE via SSTI (xlsx tempaltes) CVE-2026-53964 Fix available 7.2 HighAugust 19, 2026
• document-merge-service PyPI document-merge-service vulnerable to Remote Code Execution via Server-Side Template Injection CVE-2024-37301 Fix available 7.2 HighJune 11, 2024