Jangwoo Choe

**Name of the Vulnerable Software and Affected Versions** Genshi Template Engine version 0.7.9 **Description** Server side template inject (SSTI) in the expression evaluation component allows a remote attacker to achieve remote code execution (RCE) via crafted template expressions. SSTI occurs when an attacker is able to inject malicious code into a template that is then executed on the server. **Recommendations** At the moment, there is no information about a newer version that contains a fix for this vulnerability.

**Name of the Vulnerable Software and Affected Versions** PyMuPDF version 1.26.5 **Description** A path traversal and arbitrary file write issue exists in the `get` function within the ' main .py' file. The issue allows unauthorized access and modification of files. **Recommendations** At the moment, there is no information about a newer version that contains a fix for this vulnerability.