CWE-791

CVEs per yearBy the year they were published

1. 20222
2. 20232
3. 20247
4. 202512
5. 202624

Newest CVEs

• CVE-2026-123020

  eosphoros-ai DB-GPT Jinja2 Template __init__.py FileBasedSkill.get_prompt special elements in template engine

  eosphoros-ai · DB-GPT

  Medium5.3
• CVE-2026-121446

  svg-sanitizer 0.5.0 before 1.1.0 Incomplete url() Filtering in SVG Attributes

  darylldoyle · svg-sanitizer

  Medium5.3
• CVE-2026-108570

  Furion .NET Framework View ViewEngine.cs RunCompile special elements in template engine

  Furion · .NET Framework

  Medium5.3
• CVE-2026-103540

  formtools.org Form Tools Client Settings Clients.class.php updateClientSettingsTab special elements in template engine

  formtools.org · Form Tools

  Medium5.3
• CVE-2026-102771

  Naichen ThinkCMF Email Template MailController.php templatePut special elements in template engine

  Naichen · ThinkCMF

  Medium5.1
• CVE-2026-86206

  Access control filter bypass allows unauthorised access to APIs

  N-able · N-central

  Medium6.9
• CVE-2026-78140

  Dromara UJCMS web-file-template Endpoint WebFileTemplateController.java update special elements in template engine

  Dromara · UJCMS

  Medium5.1
• CVE-2026-75979

  xianrendzw EasyReport SQL Preview Endpoint DesignerController.java previewSqlText special elements in template engine

  xianrendzw · EasyReport

  Medium5.3
• CVE-2026-19929

  OpenBoxes Template Processing DocumentController.groovy buildZebraTemplate special elements in template engine

  OpenBoxes

  Medium5.3
• CVE-2026-18632

  langgenius dify Jinja2 jinja2_transformer.py jinja2.Template special elements used in a template engine

  langgenius · dify

  Medium5.3

Vendors it comes up for most

1. Google4
2. Dromara2
3. Sanluan2
4. 1024-lab1
5. AntaresMugisho1
6. Apache Software Foundation1
7. AstrBotDevs1
8. Axis Communications AB1
9. B&R Industrial Automation1
10. CTCMS1