CWE-95 Improper Neutralization of Directives in Dynamically Evaluated Code ('Eval Injection')

PraisonAI: API deploy code generator embeds unescaped YAML fields into Python source

Langflow: PythonREPLComponent executes unsandboxed Python code, enabling authenticated RCE and privilege escalation

PHPCSUtils: Remote code execution via eval() in AbstractArrayDeclarationSniff::getActualArrayKey()

plone.app.portlets Vulnerable to Remote Code Execution via TALES Injection

org.xwiki.rendering:xwiki-rendering-xml has an Eval Injection issue

Orval: RCE via schema property name -> computed-property-key injection in the MSW mock generator

Orval: Import-time RCE via query parameter name -> computed-property-key injection in the zod cli

Orval: Import-time RCE via header parameter name -> computed-property-key injection in the zod client

Orval: Import-time RCE via schema property name -> computed-property-key injection in the zod client

Faker: helpers.fake exploitable into arbritary code execution

senaite.core Vulnerable to Eval Injection and Missing Authorization

Xinference vulnerable to remote code execution via unsafe `eval()` in Llama3 tool-call parsing

NLTK vulnerable to Eval Injection via collocations CLI arguments

Flowise: RCE via CSVAgent csvFile data URI base64 segment is interpolated into Python source without validation

Flowise Sandbox Escape to RCE

AWS Amplify Studio UI Component Properties Has an Input Validation Issue

datamodel-code-generator vulnerable to code injection via `x-python-import` / `customTypePath` in generated import statements

WordPress Coding Standards (WordPressCS) contains an arbitrary code execution vulnerability

Picklescan has a missing detection when calling built-in python idlelib.calltip.Calltip

django-haystack: Remote Code Execution via `eval()` in Elasticsearch Result Deserialization

MantisBT: Remote Code Execution via eval() Class Hoisting in adm_config_set.php

DIRAC is vulnerable to RCE in FileCatalog DatasetManager via SQL injection + eval

DIRAC is vulnerable to RCE in RequestManager due to eval on untrusted input

EGroupware has Authenticated RCE via Malicious eTemplate Upload

Rancher vulnerable to command injection through unsanitized YAML parameter