CVE-2026-53964
2 advisories.
PyPI/document-merge-service CVE-2026-53964: high 7.2, EPSS 0.49%
Document Merge Service vulnerable to RCE via SSTI (xlsx tempaltes)
Action: Upgrade document-merge-service to 9.1.0 or later.
pip install document-merge-service==9.1.0Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | 9.1.0 | - |
Fixed versions
| 9.1.0 |
Sources
- osv: GHSA-w47q-945m-q9pc
- https://github.com/adfinis/document-merge-service/security/advisories/GHSA-w47q-945m-q9pc
- https://github.com/adfinis/document-merge-service
- https://github.com/adfinis/document-merge-service/releases/tag/v9.1.0
CVE-2026-53964 · published · modified · JSON
PyPI/document-merge-service CVE-2026-53964: high 7.2, EPSS 0.49%
Document Merge Service vulnerable to RCE via SSTI (xlsx tempaltes)
Action: Upgrade document-merge-service to 9.1.0 or later.
pip install document-merge-service==9.1.0Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | 9.1.0 | - |
Fixed versions
| 9.1.0 |
Sources
- osv: PYSEC-2026-3830
- https://github.com/adfinis/document-merge-service/security/advisories/GHSA-w47q-945m-q9pc
- https://github.com/adfinis/document-merge-service
- https://github.com/adfinis/document-merge-service/releases/tag/v9.1.0
- https://pypi.org/project/document-merge-service
- https://github.com/advisories/GHSA-w47q-945m-q9pc
- https://nvd.nist.gov/vuln/detail/CVE-2026-53964
CVE-2026-53964 · published · modified · JSON