https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-24T05:25:23.964798+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/cve-2022-24881 CVE-2022-24881 — Command Injection in Ballcat Codegen 2026-10-24T05:25:23.966020+00:00

Affected: ballcat-projects ballcat-codegen

Ballcat Codegen provides the function of online editing code to generate templates. In versions prior to 1.0.0.beta.2, attackers can implement remote code execution through malicious code injection of the template engine. This happens because Velocity and freemarker templates are introduced but input verification is not done. The fault is rectified in version 1.0.0.beta.2.