Lucene search
+L

1 matches found

Github Security Blog
Github Security Blog
added 2026/03/20 8:55 p.m.11 views

Ory Keto has a SQL injection via forged pagination tokens

Description The GetRelationships API in Ory Keto is vulnerable to SQL injection due to flaws in its pagination implementation. Pagination tokens are encrypted using the secret configured in secrets.pagination. An attacker who knows this secret can craft their own tokens, including malicious token...

7.2CVSS6.2AI score0.00229EPSS
SaveExploits0References3Affected Software1
Rows per page
Query Builder