https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Sun, 25 Oct 2026 11:44:43 +0000 https://cve.radiocsirt.org/vuln/cve-2026-79310 <p>webpy web.py 0.76 is vulnerable to server-side template injection (SSTI). The template engine can be tricked into executing attacker-controlled template code that built-in security checks are designed to reject. When an application precompiles templates from a directory the attacker can write to and later renders them through the precompiled template loader, the sandbox is bypassed and the attacker&#39;s code runs, resulting in arbitrary Python code execution and OS command execution on the server.</p> <p>webpy web.py 0.76 is vulnerable to server-side template injection (SSTI). The template engine can be tricked into executing attacker-controlled template code that built-in security checks are designed to reject. When an application precompiles templates from a directory the attacker can write to and later renders them through the precompiled template loader, the sandbox is bypassed and the attacker&#39;s code runs, resulting in arbitrary Python code execution and OS command execution on the server.</p> https://cve.radiocsirt.org/vuln/cve-2026-79310