https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Wed, 28 Oct 2026 16:20:38 +0000 https://cve.radiocsirt.org/vuln/euvd-2026-46946 EUVD-2026-46946 https://cve.radiocsirt.org/vuln/euvd-2026-46946 https://cve.radiocsirt.org/vuln/fkie_cve-2020-28246 <p>A Server-Side Template Injection (SSTI) was discovered in Form.io 2.0.0. This leads to Remote Code Execution during deletion of the default Email template URL. NOTE: the email templating service was removed after 2020. Additionally, the vendor disputes this issue indicating this is sandboxed and only executable by admins.</p> <p>A Server-Side Template Injection (SSTI) was discovered in Form.io 2.0.0. This leads to Remote Code Execution during deletion of the default Email template URL. NOTE: the email templating service was removed after 2020. Additionally, the vendor disputes this issue indicating this is sandboxed and only executable by admins.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2020-28246 https://cve.radiocsirt.org/vuln/ghsa-52vj-mr2j-f8jh <p><strong>Affected:</strong> npm: formio</p> <p>A Server-Side Template Injection (SSTI) was discovered in Form.io 2.0.0. This leads to Remote Code Execution during deletion of the default Email template URL. NOTE: the email templating service was removed after 2020. Additionally, the vendor disputes this issue indicating this is sandboxed and only executable by admins.</p> <p><strong>Affected:</strong> npm: formio</p> <p>A Server-Side Template Injection (SSTI) was discovered in Form.io 2.0.0. This leads to Remote Code Execution during deletion of the default Email template URL. NOTE: the email templating service was removed after 2020. Additionally, the vendor disputes this issue indicating this is sandboxed and only executable by admins.</p> https://cve.radiocsirt.org/vuln/ghsa-52vj-mr2j-f8jh https://cve.radiocsirt.org/vuln/gsd-2020-28246 gsd-2020-28246 https://cve.radiocsirt.org/vuln/gsd-2020-28246