Lucene search
+L

14 matches found

Cvelist
Cvelist
•added 2026/08/30 2:52 a.m.•55 views

CVE-2026-77846 JSON path injection via unescaped get_path segments in AshSqlite

Improper Neutralization of Special Elements in Data Query Logic vulnerability in ash-project ashsqlite allows an attacker who controls a getpath/2 segment to traverse into nested JSON the application never exposed, disclosing private or sensitive? embedded fields. AshSqlite.SqlImplementation buil...

2.1CVSS0.00197EPSS
SaveExploits0References4
Rows per page
Query Builder