CVE-2026-49344

Mercator is an open source web application that enables mapping of the information system. Prior to version 2025.05.19, Mercator's Query Engine "/admin/queries/execute" accepts a JSON DSL "from" / "select" / "filters" / "traverse" / "output", translates it into an Eloquent query, and returns...