Lucene search
+L

4 matches found

Cvelist
Cvelist
added 2026/05/07 1:56 p.m.63 views

CVE-2026-41422 Daptin vulnerable to SQL injection via unvalidated goqu.L() calls in aggregate API

Daptin is a GraphQL/JSON-API headless CMS. Prior to version 0.11.4, the /aggregate/:typename endpoint accepted column and group query parameters that were passed verbatim to goqu.L — a raw SQL literal expression builder — without any validation. This bypassed all parameterization and allowed...

8.3CVSS0.00345EPSS
SaveExploits0References2
CVE
CVE
added 2026/05/07 1:56 p.m.27 views

CVE-2026-41422

Daptin (CVE-2026-41422) exposes SQL injection in the /aggregate/:typename endpoint via unvalidated user input passed to goqu.L() in server/resource/resource_aggregate.go. Root cause: user-controlled column/group parameters were inserted directly into SQL without validation, bypassing parameteriza...

8.3CVSS5.9AI score0.00345EPSS
SaveExploits0References2
Vulnrichment
Vulnrichment
added 2026/05/07 1:56 p.m.11 views

CVE-2026-41422 Daptin vulnerable to SQL injection via unvalidated goqu.L() calls in aggregate API

Daptin is a GraphQL/JSON-API headless CMS. Prior to version 0.11.4, the /aggregate/:typename endpoint accepted column and group query parameters that were passed verbatim to goqu.L — a raw SQL literal expression builder — without any validation. This bypassed all parameterization and allowed...

8.3CVSS5.9AI score0.00345EPSS
SaveExploits0References2
OSV
OSV
added 2026/05/07 1:56 p.m.8 views

CVE-2026-41422 Daptin vulnerable to SQL injection via unvalidated goqu.L() calls in aggregate API

Daptin is a GraphQL/JSON-API headless CMS. Prior to version 0.11.4, the /aggregate/:typename endpoint accepted column and group query parameters that were passed verbatim to goqu.L — a raw SQL literal expression builder — without any validation. This bypassed all parameterization and allowed...

8.3CVSS6.1AI score
SaveExploits0References4
Rows per page
Query Builder