Skip to content
OpenAdvisories

Vendor

adfinis

2 known vulnerabilities.

Products

document-merge-service 2
All Critical High Medium Low Exploited only Public exploit

2 results · Clear filters · Feed

  • High 7.2
    CVE-2026-53964

    Document Merge Service vulnerable to RCE via SSTI (xlsx tempaltes)

    Document Merge Service is a document template merge service providing an API to manage templates and merge them with given data. Prior to version 9.1.0, a remote code execution (RCE) via server-side template injection (SSTI) allows for user supplied code to b…

    adfinis document-merge-service document-merge-service PyPI
  • High 7.2
    CVE-2024-37301

    document-merge-service vulnerable to Remote Code Execution via Server-Side Template Injection

    Document Merge Service is a document template merge service providing an API to manage templates and merge them with given data. Versions 6.5.1 and prior are vulnerable to remote code execution via server-side template injection which, when executed as root, …

    adfinis document-merge-service document-merge-service PyPI