https://db.gcve.eu/rss/recent/all/10 Most recent entries from all 2026-10-15T06:17:26.241471+00:00 Vulnerability-Lookup info@gcve.eu python-feedgen Contains only the most 10 recent entries. https://db.gcve.eu/vuln/fkie_cve-2026-110593 fkie_cve-2026-110593 2026-10-15T06:17:26.269465+00:00

BottleCRM through 1.14.5 contains a server-side template injection vulnerability in the send_email Celery task, which compiles the user-supplied AccountEmail message_body with django.template.Template(). Authenticated organization members can submit template tags through POST /api/accounts/<id>/create_mail/ to disclose the rendering context and loaded Python modules, or block the shared Celery worker with nested loops.

 https://db.gcve.eu/vuln/ghsa-j2m5-qh4m-hfjr GHSA-j2m5-qh4m-hfjr 2026-10-15T06:17:26.269588+00:00

BottleCRM through 1.14.5 contains a server-side template injection vulnerability in the send_email Celery task, which compiles the user-supplied AccountEmail message_body with django.template.Template(). Authenticated organization members can submit template tags through POST /api/accounts/<id>/create_mail/ to disclose the rendering context and loaded Python modules, or block the shared Celery worker with nested loops.