https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-15T17:15:12.672066+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/euvd-2026-247623 EUVD-2026-247623 2026-10-15T17:15:12.674461+00:00 EUVD-2026-247623 https://cve.radiocsirt.org/vuln/fkie_cve-2025-53833 fkie_cve-2025-53833 2026-10-15T17:15:12.674511+00:00

LaRecipe is an application that allows users to create documentation with Markdown inside a Laravel app. Versions prior to 2.8.1 are vulnerable to Server-Side Template Injection (SSTI), which could potentially lead to Remote Code Execution (RCE) in vulnerable configurations. Attackers could execute arbitrary commands on the server, access sensitive environment variables, and/or escalate access depending on server configuration. Users are strongly advised to upgrade to version v2.8.1 or later to receive a patch.

 https://cve.radiocsirt.org/vuln/ghsa-jv7x-xhv2-p5v2 GHSA-jv7x-xhv2-p5v2 — LaRecipe is vulnerable to Server-Side Template Injection attacks 2026-10-15T17:15:12.674559+00:00

Affected: Packagist: binarytorch/larecipe

### Impact Attackers could: 1. Execute arbitrary commands on the server 2. Access sensitive environment variables 3. Escalate access depending on server configuration

A critical vulnerability was discovered in LaRecipe that allows an attacker to perform Server-Side Template Injection (SSTI), potentially leading to Remote Code Execution (RCE) in vulnerable configurations.

### Patches Users are strongly advised to upgrade to version v2.8.1 or later.

### Credit We would like to thank **Roman Ananev** for responsibly identifying and reporting this vulnerability.