CVE-2026-11561

The record

Improper neutralization of special elements used in an expression language statement ('expression language injection') vulnerability in Soagen Informatics Technologies Software and Consulting Inc. Apinizer allows Code Injection. This issue affects Apinizer: from 2026.04.0 before 2026.04.6.

Affected packages

Related vulnerabilities

• CVE-2026-65591 n8n contains a sanitizer bypass vulnerability in the legacy expression evaluator's… CWE-917
• CVE-2026-57281 Jenkins Script Security Plugin 1402.v94c9ce464861 and earlier does not reject Groovy AST… CWE-917
• CVE-2026-40985 Applications that configure the WebFlowELExpressionParser are vulnerable to the use of… CWE-917
• CVE-2026-41729 Spring Data REST is vulnerable to SpEL expression injection through map-typed properties… CWE-917
• CVE-2026-41719 A SpEL Injection vulnerability exists in the Spring Data KeyValue if unsanitized user… CWE-917
• CVE-2026-41717 Spring Data MongoDB contains a SpEL (Spring Expression Language) expression injection… CWE-917
• CVE-2026-8888 Version 3.0.7 of the Securly Chrome Extension downloads config.json over HTTP and… CWE-917
• CVE-2026-2586 An authenticated Remote Code Execution (RCE) vulnerability was identified in GlassFish's… CWE-917