1 matches found
CVE-2026-78691: Improper Neutralization of Special Elements in Data Query Logic
Improper Neutralization of Special Elements in Data Query Logic vulnerability in ash-project ashsql allows a user who supplies a search term to contains/2, stringstartswith/2, or stringendswith/2 to inject live SQL LIKE wildcards, turning a literal substring search into an attacker-controlled...
2.1CVSS6AI score0.00197EPSS
SaveExploits0References2
20