VYPR

Document Merge Service

by Adfinis

Source repositories

CVEs (2)

  • CVE-2026-53964HigOct 1, 2026
    risk 0.40cvss 7.2epss 0.00

    Document Merge Service is a document template merge service providing an API to manage templates and merge them with given data. Prior to version 9.1.0, a remote code execution (RCE) via server-side template injection (SSTI) allows for user supplied code to be executed in the…

  • CVE-2024-37301HigJun 11, 2024
    risk 0.40cvss 7.2epss 0.01

    Document Merge Service is a document template merge service providing an API to manage templates and merge them with given data. Versions 6.5.1 and prior are vulnerable to remote code execution via server-side template injection which, when executed as root, can result in full…