Skip to content
OpenAdvisories

Vendor

AlchemyCMS

3 known vulnerabilities.

Products

alchemy_cms 3
All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • Medium 6.4
    CVE-2026-23885 Public exploit

    AlchemyCMS has Authenticated Remote Code Execution (RCE) via eval injection in ResourcesHelper

    Alchemy is an open source content management system engine written in Ruby on Rails. Prior to versions 7.4.12 and 8.0.3, the application uses the Ruby `eval()` function to dynamically execute a string provided by the `resource_handler.engine_name` attribute i…

    AlchemyCMS alchemy_cms alchemy_cms RubyGems