Lucene search
+L

1 matches found

OSV
OSV
added 2026/08/30 2:52 a.m.16 views

EEF-CVE-2026-77846 JSON path injection via unescaped get_path segments in AshSqlite

Summary Improper Neutralization of Special Elements in Data Query Logic vulnerability in ash-project ashsqlite allows an attacker who controls a getpath/2 segment to traverse into nested JSON the application never exposed, disclosing private or sensitive? embedded fields...

2.1CVSS5.8AI score0.00139EPSS
SaveExploits0References4
Rows per page
Query Builder