CVE-2026-104389

Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in Sirv Sirv sirv allows Blind SQL Injection.This issue affects Sirv: from n/a through 8.2.5...

CVE-2026-104389

The Sirv WordPress plugin versions up to and including 8.2.5 are vulnerable to a Blind SQL Injection flaw. This vulnerability is caused by the improper neutralization of special elements used in an SQL command. Exploitation allows an attacker to execute arbitrary SQL commands. No specific exploit...

CVE-2026-104389 WordPress Sirv plugin <= 8.2.5 - SQL Injection vulnerability

Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in Sirv Sirv sirv allows Blind SQL Injection.This issue affects Sirv: from n/a through 8.2.5...

EUVD-2026-92328

Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in Sirv Sirv sirv allows Blind SQL Injection.This issue affects Sirv: from n/a through 8.2.5...

WordPress Sirv plugin <= 8.2.5 - SQL Injection vulnerability

SQL Injection vulnerability discovered by Peter Tang in WordPress Plugin Sirv versions = 8.2.5...

CVE-2023-50898

Missing Authorization vulnerability in sirv.Com Sirv.This issue affects Sirv: from n/a through 7.1.2...

EUVD-2016-1941

Malware in sbrugna...

EUVD-2023-55631

Malicious code in bioql PyPI...

EUVD-2024-25123

Malicious code in bioql PyPI...

EUVD-2024-30721

Malicious code in bioql PyPI...

EUVD-2025-12302

Malicious code in bioql PyPI...

EUVD-2024-25124

Malicious code in bioql PyPI...

EUVD-2024-47499

Malicious code in bioql PyPI...

Directory Traversal

Overview sirv is a The optimized & lightweight middleware for serving requests to static assets Affected versions of this package are vulnerable to Directory Traversal via the viaLocal function, which uses a dirname prefix. An attacker can access files outside the intended public directory by...

@clidey/dory (0.35.0), @noooooooode/merv (0.1.0) +8 more potentially affected by CVE-2025-58751 via sirv (>=3.0.0, <=3.0.1)

sirv NPM version =3.0.0, =0.1.0, =0.0.1, =9.0.0-next.7, =0.1.0, =0.12.3, =0.1.0, =1.6.0, =1.7.0 Source cves: CVE-2025-58751 Source advisory: SNYK:JS-SIRV-12558119...

CVE-2024-27950

Missing Authorization vulnerability in Sirv CDN and Image Hosting Sirv sirv.This issue affects Sirv: from n/a through = 7.2.0...

CVE-2024-27949

Server-Side Request Forgery SSRF vulnerability in Sirv CDN and Image Hosting Sirv sirv.This issue affects Sirv: from n/a through = 7.2.0...

CVE-2016-10950

The sirv plugin before 1.3.2 for WordPress has SQL injection via the id parameter...

CVE-2025-46233

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Sirv CDN and Image Hosting Sirv sirv allows Stored XSS.This issue affects Sirv: from n/a through = 7.5.3...

WordPress Sirv plugin <= 7.5.3 - Cross Site Scripting (XSS) Vulnerability

Cross Site Scripting XSS Vulnerability discovered by Trương Hữu Phúc truonghuuphuc in WordPress Plugin Sirv versions = 7.5.3...