Lucene search
+L

3 matches found

Cvelist
Cvelist
added 2026/05/26 4:49 p.m.45 views

CVE-2026-44680 MikroORM: SQL injection via runtime-controlled identifiers and JSON-path keys

MikroORM is a TypeScript ORM for Node.js based on Data Mapper, Unit of Work and Identity Map patterns. Prior to @mikro-orm/knex 6.6.14 and @mikro-orm/sql 7.0.14, MikroORM's identifier-quoting helper Platform.quoteIdentifier and the postgres/mssql overrides and its JSON-path emitters...

7.6CVSS0.0145EPSS
SaveExploits3References5
SUSE Linux
SUSE Linux
added 2025/09/11 3:5 a.m.7 views

Security update for go1.23-openssl

This update for go1.23-openssl fixes the following issues: Update to version 1.23.12 cut from the go1.23-fips-release branch at the revision tagged go1.23.12-1-openssl-fips. jscSLE-18320 Rebase to 1.23.12 Fix HKDF-Extract The latest OpenSSL in c9s/c10s requires nil salt to be passed as a hash...

9.3CVSS7AI score0.00778EPSS
SaveExploits3References46
SUSE Linux
SUSE Linux
added 2025/09/11 3:4 a.m.9 views

Security update for go1.24-openssl

This security update of go1.24-openssl fixes the following issues: Update to version 1.24.6 cut from the go1.24-fips-release branch at the revision tagged go1.24.6-1-openssl-fips. Refs jscSLE-18320 Fix HKDF-Extract The latest OpenSSL in c9s/c10s requires nil salt to be passed as a hash length...

9.3CVSS7.1AI score0.0058EPSS
SaveExploits1References28
Rows per page
Query Builder