345 matches found
GHSA-G5GC-H5HP-555F Mass Assignment in AdonisJS Lucid Allows Overwriting Internal ORM State
Summary Description A Mass Assignment CWE-915 vulnerability in AdonisJS Lucid may allow a remote attacker who can influence data that is passed into Lucid model assignments to overwrite the internal ORM state. This may lead to logic bypasses and unauthorized record modification within a table or...
CVE-2026-22814
@adonisjs/lucid is an SQL ORM for AdonisJS built on top of Knex. Prior to 21.8.2 and 22.0.0-next.6, there is a Mass Assignment vulnerability in AdonisJS Lucid which may allow a remote attacker who can influence data that is passed into Lucid model assignments to overwrite the internal ORM state...
CVE-2026-22814 Mass Assignment in AdonisJS Lucid Allows Overwriting Internal ORM State
@adonisjs/lucid is an SQL ORM for AdonisJS built on top of Knex. Prior to 21.8.2 and 22.0.0-next.6, there is a Mass Assignment vulnerability in AdonisJS Lucid which may allow a remote attacker who can influence data that is passed into Lucid model assignments to overwrite the internal ORM state...
CVE-2026-22814 Mass Assignment in AdonisJS Lucid Allows Overwriting Internal ORM State
@adonisjs/lucid is an SQL ORM for AdonisJS built on top of Knex. Prior to 21.8.2 and 22.0.0-next.6, there is a Mass Assignment vulnerability in AdonisJS Lucid which may allow a remote attacker who can influence data that is passed into Lucid model assignments to overwrite the internal ORM state...
CVE-2026-22814
CVE-2026-22814 affects @adonisjs/lucid (AdonisJS ORM built on Knex) with a Mass Assignment vulnerability. The flaw allows an attacker who can influence assigned data to overwrite internal ORM state, potentially bypassing logic and enabling unauthorized record modification. Affected versions are L...
CVE-2023-25813
Sequelize is a Node.js ORM tool. In versions prior to 6.19.1 a SQL injection exploit exists related to replacements. Parameters which are passed through replacements are not properly escaped which can lead to arbitrary SQL injection depending on the specific queries in use. The issue has been fix...
Exploit for SQL Injection in Djangoproject Django
CTF Challenge: Django ORM Injection CVE-2025-64459 Catego...
EUVD-2025-199492
Malicious code in @mizzle-dev/orm npm...
Malicious code in @mizzle-dev/orm (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cd528c11fe54881e4913d51e5acc448562c3fc1b7edaae7aa2a40e6b12425f55 The package @mizzle-dev/orm was found to contain malicious code. Source: ghsa-malware c327219099fb121baf202032e61fc1b4881236e892dea9b4aa2b6159f953696...
EUVD-2025-177937
Malicious code in materialize-pegasus-typeorm-ursa npm...
CVE-2025-60542
SQL Injection vulnerability in TypeORM before 0.3.26 via crafted request to repository.save or repository.update due to the sqlstring call using stringifyObjects default to false...
EUVD-2020-0223
Malware in sbrugna...
EUVD-2021-0856
Malware in sbrugna...
EUVD-2024-0378
Malicious code in bioql PyPI...
EUVD-2023-0197
Malicious code in bioql PyPI...
EUVD-2022-4834
Malicious code in bioql PyPI...
EUVD-2023-0107
Malicious code in bioql PyPI...
EUVD-2025-0010
Malicious code in bioql PyPI...