repository CVE debriefs

These pages are published after PatchSiren validates generated defensive summaries against stored public CVE and source evidence.

LOW repository CVE published 2026-10-13

CVE-2026-108944

A security vulnerability has been detected in repository RAE up to a4d18c4db766419cbe7cb8c02cd9f7ceb0ec9041. The function get_obj_from_str of the file src/utils/model_utils.py of the component Config-Driven Model Instantiation is affected by code injection when manipulating the argument Target. The attack must be carried out locally. This product utilizes a rolling release system for continuous delivery, [truncated]