Sleepless Strings - Template Injection in Insomnia

A critical vulnerability (CVE-2025-1087) in the Insomnia API Client enables arbitrary code execution via Client-Side Template Injection (CSTI). The flaw, rated CVSS 9.3, stems from unsafe handling of untrusted input by the Nunjucks templating engine.