CWE-470 Use of Externally-Controlled Input to Select Classes or Code ('Unsafe Reflection')

Hydra: Optuna custom_search_space can resolve and execute untrusted callables via get_method

Hydra: Mutable instantiate policy sets allow target blocklist bypass

Backstage: Remote code execution via crafted markdown_extensions in TechDocs mkdocs.yml

Scrapy: Arbitrary Module Import via Referrer-Policy Header in RefererMiddleware

jackson-databind: Path Deserialization Missing Scheme Allowlist for FileSystemProvider Resolution

Jenkins Pipeline: Groovy Plugin vulnerable to unrestricted instantiation of types

PyTorch Lightning allows arbitrary code execution through checkpoint _instantiator hyperparameters

Grav: Incomplete callable validation in blueprint dynamic fields allows arbitrary static method invocation and file disclosure

Grav: FlexDirectory::dynamicDataField() executes arbitrary callables from blueprint data with no validation

Duplicate Advisory: Grav: FlexDirectory::dynamicDataField() executes arbitrary callables from blueprint data with no validation

RestrictedPython vulnerable to sandbox escape via string.Formatter field resolution

djust has an unauthenticated arbitrary module import via the WebSocket/SSE view-mount path

Apache OpenNLP ExtensionLoader Vulnerable to Arbitrary Class Instantiation via Model Manifest

Yamcs vulnerable to Remote Code Execution via instance-template argument YAML injection (createInstance)

cakephp/debug_kit: MailPreview contains unsafe reflection

Hydra: hydra.utils.instantiate with untrusted config can lead to code execution

kobako Sandbox Escape: guest eval reaches host RCE via method_missing → public_send (any bound Service)

RabbitMQ Java client: Unvalidated Class.forName in JSON-RPC ProcedureDescription enables arbitrary class loading

mchange-commons-java contains elements susceptible to abuse via JNDI injection and "deserialization gadgets"

Statamic: Unsafe method invocation via Antlers template resolution allows data destruction

Spinnaker has non-safe yaml deserialization, allowing RCE when using specific types

OpenAM: Unauthenticated Remote Code Execution via Class.forName in AuthXMLUtils.createCustomCallback

React Router: Arbitrary Constructor Injection via deserializeErrors() in React Router SSR Hydration

Apache Calcite is Vulnerable to Use of Externally-Controlled Input to Select Classes

Starlette: Arbitrary HTTP method dispatched to `HTTPEndpoint` attributes via `getattr`