https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Wed, 14 Oct 2026 22:43:35 +0000 https://cve.radiocsirt.org/vuln/bdu:2026-07585 bdu:2026-07585 https://cve.radiocsirt.org/vuln/bdu:2026-07585 https://cve.radiocsirt.org/vuln/euvd-2026-244817 EUVD-2026-244817 https://cve.radiocsirt.org/vuln/euvd-2026-244817 https://cve.radiocsirt.org/vuln/fkie_cve-2025-49619 <p>Skyvern through 0.1.85 is vulnerable to server-side template injection (SSTI) in the Prompt field of workflow blocks such as the Navigation v2 Block. Improper sanitization of Jinja2 template input allows authenticated users to inject crafted expressions that are evaluated on the server, leading to blind remote code execution (RCE).</p> <p>Skyvern through 0.1.85 is vulnerable to server-side template injection (SSTI) in the Prompt field of workflow blocks such as the Navigation v2 Block. Improper sanitization of Jinja2 template input allows authenticated users to inject crafted expressions that are evaluated on the server, leading to blind remote code execution (RCE).</p> https://cve.radiocsirt.org/vuln/fkie_cve-2025-49619 https://cve.radiocsirt.org/vuln/ghsa-h92g-3xc3-ww2r <p><strong>Affected:</strong> PyPI: skyvern</p> <p>Skyvern through 0.2.0 has a Jinja runtime leak in sdk/workflow/models/block.py.</p> <p><strong>Affected:</strong> PyPI: skyvern</p> <p>Skyvern through 0.2.0 has a Jinja runtime leak in sdk/workflow/models/block.py.</p> https://cve.radiocsirt.org/vuln/ghsa-h92g-3xc3-ww2r https://cve.radiocsirt.org/vuln/pysec-2026-1929 <p><strong>Affected:</strong> PyPI: skyvern</p> <p>Skyvern through 0.2.0 has a Jinja runtime leak in sdk/workflow/models/block.py.</p> <p><strong>Affected:</strong> PyPI: skyvern</p> <p>Skyvern through 0.2.0 has a Jinja runtime leak in sdk/workflow/models/block.py.</p> https://cve.radiocsirt.org/vuln/pysec-2026-1929