CWE-95

Medium likelihood

Improper Neutralization of Directives in Dynamically Evaluated Code ('Eval Injection')

Parent: CWE-94 - Improper Control of Generation of Code ('Code Injection')

The product receives input from an upstream component, but it does not neutralize or incorrectly neutralizes code syntax before using the input in a dynamic evaluation call (e.g. "eval").

126 vulnerabilities with CWE-95
CVE-2025-24893 CRITICAL KEV
XWiki Platform - Remote Code Execution
CVSS 9.8
CVE-2025-0868 CRITICAL
NPM Docsgpt - Remote Code Execution
CVE-2024-41921 HIGH
Openrobotics Robot Operating System - Code Injection
CVSS 7.8
CVE-2024-41148 HIGH
Openrobotics Robot Operating System - Code Injection
CVSS 7.8
CVE-2024-39835 HIGH
Openrobotics Robot Operating System - Code Injection
CVSS 7.8
CVE-2024-39289 HIGH
Openrobotics Robot Operating System - Code Injection
CVSS 7.8
CVE-2024-10633 HIGH
WordPress Plugins - RCE
CVSS 7.3
CVE-2024-8512 CRITICAL
W3SPEEDSTER WordPress <7.26 - RCE
CVSS 9.1
CVE-2024-45858 HIGH
Guardrails AI Guardrails <0.5.10 - RCE
CVSS 7.8
CVE-2024-45851 HIGH
Mindsdb < 24.7.4.1 - Code Injection
CVSS 8.8
CVE-2024-45850 HIGH
Mindsdb < 24.7.4.1 - Code Injection
CVSS 8.8
CVE-2024-45849 HIGH
Mindsdb < 24.7.4.1 - Code Injection
CVSS 8.8
CVE-2024-45848 HIGH
Mindsdb < 24.7.4.1 - Code Injection
CVSS 8.8
CVE-2024-45847 HIGH
Mindsdb < 24.7.4.1 - Code Injection
CVSS 8.8
CVE-2024-45846 HIGH
Mindsdb < 24.7.4.1 - Code Injection
CVSS 8.8
CVE-2024-27321 HIGH
Refuel Autolabel <0.0.8 - RCE
CVSS 7.8
CVE-2024-27320 HIGH
Refuel Autolabel <0.0.8 - RCE
CVSS 7.8
CVE-2024-7954 CRITICAL
SPIP - RCE
CVSS 9.8
CVE-2024-43404 CRITICAL
Megacord Megabot < 1.5.0 - Code Injection
CVSS 9.8
CVE-2024-6891 HIGH
Python <version> - Code Injection
CVSS 8.8
CVE-2024-37901 CRITICAL
Xwiki < 14.10.21 - Missing Authorization
CVSS 9.9
CVE-2024-39173 CRITICAL
calculator-boilerplate v1.0 - RCE
CVSS 9.8
CVE-2024-36404 CRITICAL
GeoTools <31.2-30.4-29.6 - RCE
CVSS 9.8
CVE-2024-36401 CRITICAL KEV
Geoserver unauthenticated Remote Code Execution
CVSS 9.8
CVE-2024-3562 HIGH
Custom Field Suite <2.6.7 - Code Injection
CVSS 8.8
Details
Vulnerabilities 126
Exploit Likelihood Medium
Links
MITRE CWE Entry Search this CWE With Exploits