Lucene search
+L

2 matches found

OSV
OSV
added 2026/08/30 11:53 a.m.14 views

EEF-CVE-2026-80227 SQL string_trim removes only spaces, diverging from in-memory trimming in AshSql

Summary Incorrect Comparison vulnerability in ash-project ashsql allows a user to pad a string field with tab, newline, carriage-return, or form-feed characters and pass a trimmed uniqueness or equality check in the database that the same expression would fail in memory or the reverse. stringtrim...

2.1CVSS5.8AI score0.00257EPSS
SaveExploits0References4
Positive Technologies
Positive Technologies
added 2026/08/30 12:00 a.m.26 views

PT-2026-83547

Name of the Vulnerable Software and Affected Versions ash sql versions 0.1.0 through 0.7.0 Description An incorrect comparison issue exists where a user can pad a string field with tab, newline, carriage-return, or form-feed characters to bypass trimmed uniqueness or equality checks. This occurs...

2.1CVSS5.8AI score0.00257EPSS
SaveExploits0References15
Rows per page
Query Builder