Skip to content

Fix: Server-side template injection: GET /profile passes the user-controlled username to eval(), enabling remote code execution - #363

Closed
WesternConcrete wants to merge 1 commit into
developfrom
devin/1789283345-profile-ssti-eval-develop
Closed

Fix: Server-side template injection: GET /profile passes the user-controlled username to eval(), enabling remote code execution#363
WesternConcrete wants to merge 1 commit into
developfrom
devin/1789283345-profile-ssti-eval-develop

Commits

Commits on Sep 13, 2026