CVE-2026-124555

A SQL injection vulnerability exists in JeecgBoot 3.9.5 within the Table Dictionary API component. The flaw specifically affects the JimuFormApiService.getTableDictList function located in the file /jeecg-boot/jmreport/form/getTableDictList. Improper handling of the searchSql argument allows an a...