https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-24T04:42:19.245869+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/euvd-2026-232754 EUVD-2026-232754 2026-10-24T04:42:19.248684+00:00 EUVD-2026-232754 https://cve.radiocsirt.org/vuln/fkie_cve-2022-24881 fkie_cve-2022-24881 2026-10-24T04:42:19.248716+00:00

Ballcat Codegen provides the function of online editing code to generate templates. In versions prior to 1.0.0.beta.2, attackers can implement remote code execution through malicious code injection of the template engine. This happens because Velocity and freemarker templates are introduced but input verification is not done. The fault is rectified in version 1.0.0.beta.2.

 https://cve.radiocsirt.org/vuln/ghsa-fv3m-xhqw-9m79 GHSA-fv3m-xhqw-9m79 — ballcat-codegen template engine remote code execution injection 2026-10-24T04:42:19.248747+00:00

Affected: Maven: com.hccake:ballcat-codegen

### Impact Ballcat Codegen provides the function of online editing code to generate templates. In version < 1.0.0.beta.2, since Velocity and freemarker templates are introduced but input verification is not done, attackers can implement remote code execution through malicious code injection of the template engine.

### Patches The fault is rectified and needs to be upgraded to the latest version.

 https://cve.radiocsirt.org/vuln/gsd-2022-24881 gsd-2022-24881 2026-10-24T04:42:19.248775+00:00 gsd-2022-24881