CWE-627 · Deserialization and Object Injection
Dynamic Variable Evaluation
5CVEs
0exploited
0with a public check
0likely (EPSS 10%+)
SortMost likely exploited
5 CVEs with CWE-627 as their weakness
| CVE · most likely exploited | CVSS | EPSS | Published |
|---|---|---|---|
| CVE-2024-8953Unsafe eval usage in composiohq/composiocomposiohq · composiohq/composio · CVSS 7.2 · 2025-03-20 | 7.2 | 1.2% | 2025-03-20 |
| CVE-2026-2452Unsafe variable evaluation in email templatespretix · pretix-newsletter · CVSS 7.5 · 2026-02-16 | 7.5 | 0.3% | 2026-02-16 |
| CVE-2026-2451Unsafe variable evaluation in email templatespretix · pretix-doistep · CVSS 7.5 · 2026-02-16 | 7.5 | 0.3% | 2026-02-16 |
| CVE-2026-2415Unsafe variable evaluation in email templatespretix · pretix · CVSS 7.5 · 2026-02-16 | 7.5 | 0.3% | 2026-02-16 |
| CVE-2023-31032CVEnvidia · DGX A100 · CVSS 7.5 · 2024-01-12 | 7.5 | 0.2% | 2024-01-12 |
EPSS is the probability of exploitation in the next 30 days (FIRST). Data as of 2026-11-14.