https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-19T12:42:55.929627+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/euvd-2026-328277 EUVD-2026-328277 2026-10-19T12:42:55.978234+00:00 EUVD-2026-328277 https://cve.radiocsirt.org/vuln/fkie_cve-2026-36418 fkie_cve-2026-36418 2026-10-19T12:42:55.978272+00:00

JimuReport versions 2.3.4 and below are vulnerable to remote code execution due to improper handling of Aviator expressions. The /jmreport/executeSelectApi endpoint passes user-supplied input directly to the Aviator expression engine without adequate validation allowing attackers to execute arbitrary code.

 https://cve.radiocsirt.org/vuln/ghsa-mfm8-63gh-gpv6 GHSA-mfm8-63gh-gpv6 2026-10-19T12:42:55.978305+00:00

JimuReport versions 2.3.4 and below are vulnerable to remote code execution due to improper handling of Aviator expressions. The /jmreport/executeSelectApi endpoint passes user-supplied input directly to the Aviator expression engine without adequate validation allowing attackers to execute arbitrary code.