CLEANSTART-2026-ET86221 xmldom is a pure JavaScript W3C standard-based (XML DOM Level 2 Core) `DOMParser` and `XMLSerializer` module

Security vulnerability affects the sqlpad package. xmldom is a pure JavaScript W3C standard-based XML DOM Level 2 Core DOMParser and XMLSerializer module...

CLEANSTART-2026-XH03813 xmldom is a pure JavaScript W3C standard-based (XML DOM Level 2 Core) `DOMParser` and `XMLSerializer` module

Security vulnerability affects the sqlpad package. xmldom is a pure JavaScript W3C standard-based XML DOM Level 2 Core DOMParser and XMLSerializer module...

CLEANSTART-2026-LA96132 xmldom is a pure JavaScript W3C standard-based (XML DOM Level 2 Core) `DOMParser` and `XMLSerializer` module

Security vulnerability affects the sqlpad package. xmldom is a pure JavaScript W3C standard-based XML DOM Level 2 Core DOMParser and XMLSerializer module...

CLEANSTART-2026-LU06052 Security fix for GHSA-j759-j44w-7fr8 applied in: sqlpad 7.5.7-r2

Security vulnerability affects the sqlpad package. This issue is resolved in later releases. See references for vulnerability details...

CLEANSTART-2026-FD90134 Security fix for GHSA-x6wf-f3px-wcqx applied in: sqlpad 7.5.7-r2

Security vulnerability affects the sqlpad package. This issue is resolved in later releases. See references for vulnerability details...

CLEANSTART-2026-KY48583 Security fix for GHSA-wh4c-j3r5-mjhp applied in: sqlpad 7.5.7-r2

Security vulnerability affects the sqlpad package. This issue is resolved in later releases. See references for vulnerability details...

CLEANSTART-2026-KK22161 Security fix for GHSA-f6ww-3ggp-fr8h applied in: sqlpad 7.5.7-r2

Security vulnerability affects the sqlpad package. This issue is resolved in later releases. See references for vulnerability details...

CLEANSTART-2026-FU74161 Security fix for GHSA-2v35-w6hq-6mfw applied in: sqlpad 7.5.7-r2

Security vulnerability affects the sqlpad package. This issue is resolved in later releases. See references for vulnerability details...

CLEANSTART-2026-XQ39767 Security fix for GHSA-v422-hmwv-36x6 applied in: sqlpad 7.5.7-r2, sqlpad 7.5.7-r3

Security vulnerability affects the sqlpad package. This issue is resolved in later releases. See references for vulnerability details...

SQLPad CVE-2022-0944 Detect

Detects SQLPad web console. !/usr/bin/env python3 -- coding: utf-8 -- """Detects SQLPad web console.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = "name": "SQLPad CVE-2022-0944 Detect", "description": "Detects SQLPad web...

SQLPad CVE-2022-0944 Handlebars SSTI RCE

CVE-2022-0944 SQLPad = 6.10.0: unauthenticated POST /api/test-connection embeds attacker input in Handlebars templates leading to Node childprocess.execSync blind; exfil or reverse shell. !/usr/bin/env python3 -- coding: utf-8 -- """SQLPad CVE-2022-0944 unauthenticated Handlebars SSTI RCE blind."...

GHSA-JGGR-W7FW-PC2J vulnerabilities

Vulnerabilities for packages: langfuse-fips, langfuse, dotstatsuite-supercore, sqlpad...

GHSA-JGGR-W7FW-PC2J vulnerabilities

Vulnerabilities for packages: langfuse, sqlpad...

CVE-2026-101913 vulnerabilities

Vulnerabilities for packages: langfuse, librechat, homepage, langfuse-fips, unleash-fips, wazuh-dashboard, wazuh-dashboard-fips, npm, actions-runner, pulumi, code-server, commercial-gitlab-rails-ee, graalvm, sqlpad, opensearch-dashboards, kibana, unleash-proxy, lerna,...

GHSA-RPW4-54J3-4H4Q vulnerabilities

Vulnerabilities for packages: langfuse, librechat, homepage, langfuse-fips, unleash-fips, wazuh-dashboard, wazuh-dashboard-fips, npm, actions-runner, pulumi, code-server, commercial-gitlab-rails-ee, graalvm, sqlpad, opensearch-dashboards, kibana, unleash-proxy, lerna,...

GHSA-2VR4-CQ9G-PVRC vulnerabilities

Vulnerabilities for packages: langfuse, librechat, homepage, langfuse-fips, unleash-fips, wazuh-dashboard, wazuh-dashboard-fips, npm, actions-runner, pulumi, code-server, commercial-gitlab-rails-ee, graalvm, sqlpad, opensearch-dashboards, kibana, unleash-proxy, lerna,...

CVE-2026-101910 vulnerabilities

Vulnerabilities for packages: langfuse, librechat, homepage, langfuse-fips, unleash-fips, wazuh-dashboard, wazuh-dashboard-fips, npm, actions-runner, pulumi, code-server, commercial-gitlab-rails-ee, graalvm, sqlpad, opensearch-dashboards, kibana, unleash-proxy, lerna,...

CVE-2026-101913 vulnerabilities

Vulnerabilities for packages: npm, prism, renovate, sqlpad, code-server, opensearch-dashboards, pulumi, lerna...

CVE-2026-101910 vulnerabilities

Vulnerabilities for packages: npm, prism, renovate, sqlpad, code-server, opensearch-dashboards, pulumi, lerna...

GHSA-2VR4-CQ9G-PVRC vulnerabilities

Vulnerabilities for packages: npm, prism, renovate, sqlpad, code-server, opensearch-dashboards, pulumi, lerna...