cve.nowby Sazabi

PyPIPackage

document-merge-service

2 known vulnerabilities (2 high), with the versions each affects and the releases that fix them.

Latest release: Not known: cve.now hasn't read this package's releases
Newest unaffected release: Not known without release data
Advisories: 2 · 2 high

Weekly downloads: 32
Dependents: 0
Registry: PyPI

Advisories 2

CVE-2026-53964High 7.2
Document Merge Service vulnerable to RCE via SSTI (xlsx tempaltes)
Affected: fixed in 9.1.0.
CVE-2024-37301High 7.2
document-merge-service vulnerable to Remote Code Execution via Server-Side Template Injection
Affected: fixed in 6.5.2.