Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2025-26599 State: PUBLISHED Published: 2025-02-25T15:55:02.964Z Last Updated: 2025-11-06T21:09:19.556Z Severity: HIGH (CVSS 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H) Vendors: Red Hat Products: Red Hat Enterprise Linux 10, Red Hat Enterprise Linux 7 Extended Lifecycle Support, Red Hat Enterprise Linux 8, Red Hat Enterprise Linux 8.2 Advanced Update Support, Red Hat Enterprise Linux 8.4 Advanced Mission Critical Update Support, Red Hat Enterprise Linux 8.4 Telecommunications Update Service, Red Hat Enterprise Linux 8.4 Update Services for SAP Solutions, Red Hat Enterprise Linux 8.6 Advanced Mission Critical Update Support, Red Hat Enterprise Linux 8.6 Telecommunications Upd
d Hat Enterprise Linux 8.6 Advanced Mission Critical Update Support, Red Hat Enterprise Linux 8.6 Telecommunications Update Service, Red Hat Enterprise Linux 8.6 Update Services for SAP Solutions, Red Hat Enterprise Linux 8.8 Extended Update Support, Red Hat Enterprise Linux 9, Red Hat Enterprise Linux 9.0 Update Services for SAP Solutions, Red Hat Enterprise Linux 9.2 Extended Update Support, Red Hat Enterprise Linux 9.4 Extended Update Support, Red Hat Enterprise Linux 6 Problem Types: CWE-824 Description: An access to an uninitialized pointer flaw was found in X.Org and Xwayland. The function compCheckRedirect() may fail if it cannot allocate the backing pixmap. In that case, compRedirect
Xwayland. The function compCheckRedirect() may fail if it cannot allocate the backing pixmap. In that case, compRedirectWindow() will return a BadAlloc error without validating the window tree marked just before, which leaves the validated data partly initialized and the use of an uninitialized pointer later. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://access.redhat.com/errata/RHSA-2025:2500 - https://access.redhat.com/errata/RHSA-2025:2502 - https://access.redhat.com/errata/RHSA-2025:2861 - https://access.redhat.com/errata/RHSA-2025:2862 - https://access.redhat.com/errata/RHSA-2025:2865 - https://access.redhat.com/errata/RHSA-2025:2866 -
ata/RHSA-2025:2862 - https://access.redhat.com/errata/RHSA-2025:2865 - https://access.redhat.com/errata/RHSA-2025:2866 - https://access.redhat.com/errata/RHSA-2025:2873 - https://access.redhat.com/errata/RHSA-2025:2874 - https://access.redhat.com/errata/RHSA-2025:2875 - https://access.redhat.com/errata/RHSA-2025:2879 - https://access.redhat.com/errata/RHSA-2025:2880 - https://access.redhat.com/errata/RHSA-2025:7163 - https://access.redhat.com/errata/RHSA-2025:7165 - https://access.redhat.com/errata/RHSA-2025:7458 - https://access.redhat.com/security/cve/CVE-2025-26599 - https://bugzilla.redhat.com/show_bug.cgi?id=2345253
CVE ID: CVE-2025-26600 State: PUBLISHED Published: 2025-02-25T15:55:20.421Z Last Updated: 2025-11-06T21:09:21.180Z Severity: HIGH (CVSS 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H) Vendors: Red Hat Products: Red Hat Enterprise Linux 10, Red Hat Enterprise Linux 7 Extended Lifecycle Support, Red Hat Enterprise Linux 8, Red Hat Enterprise Linux 8.2 Advanced Update Support, Red Hat Enterprise Linux 8.4 Advanced Mission Critical Update Support, Red Hat Enterprise Linux 8.4 Telecommunications Update Service, Red Hat Enterprise Linux 8.4 Update Services for SAP Solutions, Red Hat Enterprise Linux 8.6 Advanced Mission Critical Update Support, Red Hat Enterprise Linux 8.6 Telecommunications Upd
d Hat Enterprise Linux 8.6 Advanced Mission Critical Update Support, Red Hat Enterprise Linux 8.6 Telecommunications Update Service, Red Hat Enterprise Linux 8.6 Update Services for SAP Solutions, Red Hat Enterprise Linux 8.8 Extended Update Support, Red Hat Enterprise Linux 9, Red Hat Enterprise Linux 9.0 Update Services for SAP Solutions, Red Hat Enterprise Linux 9.2 Extended Update Support, Red Hat Enterprise Linux 9.4 Extended Update Support, Red Hat Enterprise Linux 6 Problem Types: CWE-416 Description: A use-after-free flaw was found in X.Org and Xwayland. When a device is removed while still frozen, the events queued for that device remain while the device is freed. Replaying the even
ce is removed while still frozen, the events queued for that device remain while the device is freed. Replaying the events will cause a use-after-free. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://access.redhat.com/errata/RHSA-2025:2500 - https://access.redhat.com/errata/RHSA-2025:2502 - https://access.redhat.com/errata/RHSA-2025:2861 - https://access.redhat.com/errata/RHSA-2025:2862 - https://access.redhat.com/errata/RHSA-2025:2865 - https://access.redhat.com/errata/RHSA-2025:2866 - https://access.redhat.com/errata/RHSA-2025:2873 - https://access.redhat.com/errata/RHSA-2025:2874 - https://access.redhat.com/errata/RHSA-2025:2875 - https://
2025:2873 - https://access.redhat.com/errata/RHSA-2025:2874 - https://access.redhat.com/errata/RHSA-2025:2875 - https://access.redhat.com/errata/RHSA-2025:2879 - https://access.redhat.com/errata/RHSA-2025:2880 - https://access.redhat.com/errata/RHSA-2025:7163 - https://access.redhat.com/errata/RHSA-2025:7165 - https://access.redhat.com/errata/RHSA-2025:7458 - https://access.redhat.com/security/cve/CVE-2025-26600 - https://bugzilla.redhat.com/show_bug.cgi?id=2345252
CVE ID: CVE-2025-26601 State: PUBLISHED Published: 2025-02-25T15:55:36.775Z Last Updated: 2025-11-06T21:09:22.648Z Severity: HIGH (CVSS 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H) Vendors: Red Hat Products: Red Hat Enterprise Linux 10, Red Hat Enterprise Linux 7 Extended Lifecycle Support, Red Hat Enterprise Linux 8, Red Hat Enterprise Linux 8.2 Advanced Update Support, Red Hat Enterprise Linux 8.4 Advanced Mission Critical Update Support, Red Hat Enterprise Linux 8.4 Telecommunications Update Service, Red Hat Enterprise Linux 8.4 Update Services for SAP Solutions, Red Hat Enterprise Linux 8.6 Advanced Mission Critical Update Support, Red Hat Enterprise Linux 8.6 Telecommunications Upd
d Hat Enterprise Linux 8.6 Advanced Mission Critical Update Support, Red Hat Enterprise Linux 8.6 Telecommunications Update Service, Red Hat Enterprise Linux 8.6 Update Services for SAP Solutions, Red Hat Enterprise Linux 8.8 Extended Update Support, Red Hat Enterprise Linux 9, Red Hat Enterprise Linux 9.0 Update Services for SAP Solutions, Red Hat Enterprise Linux 9.2 Extended Update Support, Red Hat Enterprise Linux 9.4 Extended Update Support, Red Hat Enterprise Linux 6 Problem Types: CWE-416 Description: A use-after-free flaw was found in X.Org and Xwayland. When changing an alarm, the values of the change mask are evaluated one after the other, changing the trigger values as requested,
ng an alarm, the values of the change mask are evaluated one after the other, changing the trigger values as requested, and eventually, SyncInitTrigger() is called. If one of the changes triggers an error, the function will return early, not adding the new sync object, possibly causing a use-after-free when the alarm eventually triggers. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://access.redhat.com/errata/RHSA-2025:2500 - https://access.redhat.com/errata/RHSA-2025:2502 - https://access.redhat.com/errata/RHSA-2025:2861 - https://access.redhat.com/errata/RHSA-2025:2862 - https://access.redhat.com/errata/RHSA-2025:2865 - https://access.redha
https://access.redhat.com/errata/RHSA-2025:2862 - https://access.redhat.com/errata/RHSA-2025:2865 - https://access.redhat.com/errata/RHSA-2025:2866 - https://access.redhat.com/errata/RHSA-2025:2873 - https://access.redhat.com/errata/RHSA-2025:2874 - https://access.redhat.com/errata/RHSA-2025:2875 - https://access.redhat.com/errata/RHSA-2025:2879 - https://access.redhat.com/errata/RHSA-2025:2880 - https://access.redhat.com/errata/RHSA-2025:7163 - https://access.redhat.com/errata/RHSA-2025:7165 - https://access.redhat.com/errata/RHSA-2025:7458 - https://access.redhat.com/security/cve/CVE-2025-26601 - https://bugzilla.redhat.com/show_bug.cgi?id=2345251
CVE ID: CVE-2025-26603 State: PUBLISHED Published: 2025-02-18T19:04:24.273Z Last Updated: 2025-03-07T00:10:51.265Z Severity: MEDIUM (CVSS 4.2 CVSS:3.1/AV:L/AC:H/PR:L/UI:R/S:U/C:L/I:L/A:L) Vendors: vim Products: vim Problem Types: CWE-416 Description: Vim is a greatly improved version of the good old UNIX editor Vi. Vim allows to redirect screen messages using the `:redir` ex command to register, variables and files. It also allows to show the contents of registers using the `:registers` or `:display` ex command. When redirecting the output of `:display` to a register, Vim will free the register content before storing the new content in the register. Now when redirecting the `:display` comman
ill free the register content before storing the new content in the register. Now when redirecting the `:display` command to a register that is being displayed, Vim will free the content while shortly afterwards trying to access it, which leads to a use-after-free. Vim pre 9.1.1115 checks in the ex_display() function, that it does not try to redirect to a register while displaying this register at the same time. However this check is not complete, and so Vim does not check the `+` and `*` registers (which typically donate the X11/clipboard registers, and when a clipboard connection is not possible will fall back to use register 0 instead. In Patch 9.1.1115 Vim will therefore skip outputting
nnection is not possible will fall back to use register 0 instead. In Patch 9.1.1115 Vim will therefore skip outputting to register zero when trying to redirect to the clipboard registers `*` or `+`. Users are advised to upgrade. There are no known workarounds for this vulnerability. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://github.com/vim/vim/security/advisories/GHSA-63p5-mwg2-787v - https://github.com/vim/vim/commit/c0f0e2380e5954f4a52a131bf6b8
CVE ID: CVE-2025-26604 State: PUBLISHED Published: 2025-02-18T19:11:21.037Z Last Updated: 2025-02-19T15:15:52.194Z Severity: HIGH (CVSS 8.3 CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:C/C:L/I:H/A:H) Vendors: Discord-Agora Products: Kernel Problem Types: CWE-200 Description: Discord-Bot-Framework-Kernel is a Discord bot framework built with interactions.py, featuring modular extension management and secure execution. Because of the nature of arbitrary user-submited code execution, this allows user to execute potentially malicious code to perform damage or extract sensitive information. By loading the module containing the following code and run the command, the bot token can be extracted. Then the attacke
y loading the module containing the following code and run the command, the bot token can be extracted. Then the attacker can load a blocking module to sabotage the bot (DDoS attack) and the token can be used to make the fake bot act as the real one. If the bot has very high privilege, the attacker basically has full control before the user kicks the bot. Any Discord user that hosts Discord-Bot-Framework-Kernel before commit f0d9e70841a0e3170b88c4f8d562018ccd8e8b14 is affected. Users are advised to upgrade. Users unable to upgrade may attempt to limit their discord bot's access via configuration options. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://github.com/Disc
cess via configuration options. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://github.com/Discord-Agora/Kernel/security/advisories/GHSA-87jf-gf75-wwfm - https://github.com/Discord-Agora/Kernel/commit/f0d9e70841a0e3170b88c4f8d562018ccd8e8b14
CVE ID: CVE-2025-26605 State: PUBLISHED Published: 2025-02-18T20:38:21.148Z Last Updated: 2025-02-18T21:13:42.744Z Vendors: LabRedesCefetRJ Products: WeGIA Problem Types: CWE-89 Description: WeGIA is an open source Web Manager for Institutions with a focus on Portuguese language users. A SQL Injection vulnerability was discovered in the WeGIA application, `deletar_cargo.php` endpoint. This vulnerability could allow an authorized attacker to execute arbitrary SQL queries, allowing access to sensitive information. This issue has been addressed in version 3.2.13 and all users are advised to upgrade. There are no known workarounds for this vulnerability. Additional Analyst Notes: - CISA ADP Vuln
are advised to upgrade. There are no known workarounds for this vulnerability. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://github.com/LabRedesCefetRJ/WeGIA/security/advisories/GHSA-6gv7-4j8g-cvgp
CVE ID: CVE-2025-26606 State: PUBLISHED Published: 2025-02-18T20:37:53.943Z Last Updated: 2025-02-19T16:43:38.093Z Vendors: LabRedesCefetRJ Products: WeGIA Problem Types: CWE-89, CWE-284 Description: WeGIA is an open source Web Manager for Institutions with a focus on Portuguese language users. A SQL Injection vulnerability was discovered in the WeGIA application, `informacao_adicional.php` endpoint. This vulnerability could allow an attacker to execute arbitrary SQL queries, allowing unauthorized access to sensitive information. This issue has been addressed in version 3.2.13 and all users are advised to upgrade. There are no known workarounds for this vulnerability. Additional Analyst Note
.13 and all users are advised to upgrade. There are no known workarounds for this vulnerability. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://github.com/LabRedesCefetRJ/WeGIA/security/advisories/GHSA-rxjr-cw9q-cwwg
CVE ID: CVE-2025-26607 State: PUBLISHED Published: 2025-02-18T20:37:23.064Z Last Updated: 2025-02-19T16:45:24.942Z Vendors: LabRedesCefetRJ Products: WeGIA Problem Types: CWE-89, CWE-284 Description: WeGIA is an open source Web Manager for Institutions with a focus on Portuguese language users. A SQL Injection vulnerability was discovered in the WeGIA application, `documento_excluir.php` endpoint. This vulnerability could allow an attacker to execute arbitrary SQL queries, allowing unauthorized access to sensitive information. This issue has been addressed in version 3.2.13 and all users are advised to upgrade. There are no known workarounds for this vulnerability. Additional Analyst Notes:
and all users are advised to upgrade. There are no known workarounds for this vulnerability. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://github.com/LabRedesCefetRJ/WeGIA/security/advisories/GHSA-g6wj-3vm2-c59m
CVE ID: CVE-2025-26608 State: PUBLISHED Published: 2025-02-18T20:36:50.324Z Last Updated: 2025-02-18T21:21:19.349Z Vendors: LabRedesCefetRJ Products: WeGIA Problem Types: CWE-89, CWE-284 Description: WeGIA is an open source Web Manager for Institutions with a focus on Portuguese language users. A SQL Injection vulnerability was discovered in the WeGIA application, `dependente_docdependente.php` endpoint. This vulnerability could allow an attacker to execute arbitrary SQL queries, allowing unauthorized access to sensitive information. This issue has been addressed in version 3.2.13 and all users are advised to upgrade. There are no known workarounds for this vulnerability. Additional Analyst
3.2.13 and all users are advised to upgrade. There are no known workarounds for this vulnerability. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://github.com/LabRedesCefetRJ/WeGIA/security/advisories/GHSA-65h2-7484-2pww
CVE ID: CVE-2025-26609 State: PUBLISHED Published: 2025-02-18T20:36:13.177Z Last Updated: 2025-02-18T21:22:58.762Z Vendors: LabRedesCefetRJ Products: WeGIA Problem Types: CWE-89, CWE-284 Description: WeGIA is an open source Web Manager for Institutions with a focus on Portuguese language users. A SQL Injection vulnerability was discovered in the WeGIA application, `familiar_docfamiliar.php` endpoint. This vulnerability could allow an attacker to execute arbitrary SQL queries, allowing unauthorized access to sensitive information. This issue has been addressed in version 3.2.14 and all users are advised to upgrade. There are no known workarounds for this vulnerability. Additional Analyst Note
.14 and all users are advised to upgrade. There are no known workarounds for this vulnerability. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://github.com/LabRedesCefetRJ/WeGIA/security/advisories/GHSA-h7jx-ggv8-v2rh
CVE ID: CVE-2025-26610 State: PUBLISHED Published: 2025-02-18T20:35:31.857Z Last Updated: 2025-02-18T21:25:22.968Z Vendors: LabRedesCefetRJ Products: WeGIA Problem Types: CWE-89 Description: WeGIA is an open source Web Manager for Institutions with a focus on Portuguese language users. A SQL Injection vulnerability was discovered in the WeGIA application, `restaurar_produto_desocultar.php` endpoint. This vulnerability allow an authorized attacker to execute arbitrary SQL queries, allowing access to sensitive information. This issue has been addressed in version 3.2.13 and all users are advised to upgrade. There are no known workarounds for this vulnerability. Additional Analyst Notes: - CISA
ll users are advised to upgrade. There are no known workarounds for this vulnerability. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://github.com/LabRedesCefetRJ/WeGIA/security/advisories/GHSA-6p7c-9hcx-jpqj
CVE ID: CVE-2025-26611 State: PUBLISHED Published: 2025-02-18T20:34:58.710Z Last Updated: 2025-02-18T21:31:49.532Z Vendors: LabRedesCefetRJ Products: WeGIA Problem Types: CWE-89, CWE-284 Description: WeGIA is an open source Web Manager for Institutions with a focus on Portuguese language users. A SQL Injection vulnerability was discovered in the WeGIA application, `remover_produto.php` endpoint. This vulnerability could allow an attacker to execute arbitrary SQL queries, allowing unauthorized access to sensitive information. This issue has been addressed in version 3.2.13 and all users are advised to upgrade. There are no known workarounds for this vulnerability. Additional Analyst Notes: -
nd all users are advised to upgrade. There are no known workarounds for this vulnerability. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://github.com/LabRedesCefetRJ/WeGIA/security/advisories/GHSA-q273-4vcj-qqp4
CVE ID: CVE-2025-26612 State: PUBLISHED Published: 2025-02-18T20:34:18.195Z Last Updated: 2025-02-18T21:32:53.732Z Vendors: LabRedesCefetRJ Products: WeGIA Problem Types: CWE-89 Description: WeGIA is an open source Web Manager for Institutions with a focus on Portuguese language users. A SQL Injection vulnerability was discovered in the WeGIA application, `adicionar_almoxarife.php` endpoint. This vulnerability could allow an attacker to execute arbitrary SQL queries, allowing unauthorized access to sensitive information. This issue has been addressed in version 3.2.13 and all users are advised to upgrade. There are no known workarounds for this vulnerability. Additional Analyst Notes: - CISA
ll users are advised to upgrade. There are no known workarounds for this vulnerability. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://github.com/LabRedesCefetRJ/WeGIA/security/advisories/GHSA-9cwj-p4x6-pp88
CVE ID: CVE-2025-26613 State: PUBLISHED Published: 2025-02-18T20:33:44.859Z Last Updated: 2025-02-18T21:36:06.208Z Vendors: LabRedesCefetRJ Products: WeGIA Problem Types: CWE-78, CWE-284 Description: WeGIA is an open source Web Manager for Institutions with a focus on Portuguese language users. An OS Command Injection vulnerability was discovered in the WeGIA application, `gerenciar_backup.php` endpoint. This vulnerability could allow an attacker to execute arbitrary code remotely. This issue has been addressed in version 3.2.14 and all users are advised to upgrade. There are no known workarounds for this vulnerability. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https:/
re no known workarounds for this vulnerability. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://github.com/LabRedesCefetRJ/WeGIA/security/advisories/GHSA-g3w6-m6w8-p6r2
CVE ID: CVE-2025-26614 State: PUBLISHED Published: 2025-02-18T20:32:48.117Z Last Updated: 2025-02-18T21:35:32.069Z Vendors: LabRedesCefetRJ Products: WeGIA Problem Types: CWE-89 Description: WeGIA is an open source Web Manager for Institutions with a focus on Portuguese language users. A SQL Injection vulnerability was discovered in the WeGIA application, `deletar_documento.php` endpoint. This vulnerability allow an authorized attacker to execute arbitrary SQL queries, allowing access to sensitive information. This issue has been addressed in version 3.2.14 and all users are advised to upgrade. There are no known workarounds for this vulnerability. Additional Analyst Notes: - CISA ADP Vulnri
e advised to upgrade. There are no known workarounds for this vulnerability. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://github.com/LabRedesCefetRJ/WeGIA/security/advisories/GHSA-3qhx-gfqj-vm2j
CVE ID: CVE-2025-26615 State: PUBLISHED Published: 2025-02-18T20:32:10.899Z Last Updated: 2025-02-19T15:32:04.703Z Severity: CRITICAL (CVSS 10 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H) Vendors: LabRedesCefetRJ Products: WeGIA Problem Types: CWE-22, CWE-284 Description: WeGIA is an open source Web Manager for Institutions with a focus on Portuguese language users. A Path Traversal vulnerability was discovered in the WeGIA application, `examples.php` endpoint. This vulnerability could allow an attacker to gain unauthorized access to sensitive information stored in `config.php`. `config.php` contains information that could allow direct access to the database. This issue has been addressed i
.php`. `config.php` contains information that could allow direct access to the database. This issue has been addressed in version 3.2.14 and all users are advised to upgrade. There are no known workarounds for this vulnerability. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://github.com/LabRedesCefetRJ/WeGIA/security/advisories/GHSA-p5wx-pv8j-f96h
CVE ID: CVE-2025-26616 State: PUBLISHED Published: 2025-02-18T20:30:01.253Z Last Updated: 2025-02-19T15:36:19.521Z Vendors: LabRedesCefetRJ Products: WeGIA Problem Types: CWE-22, CWE-284 Description: WeGIA is an open source Web Manager for Institutions with a focus on Portuguese language users. A Path Traversal vulnerability was discovered in the WeGIA application, `exportar_dump.php` endpoint. This vulnerability could allow an attacker to gain unauthorized access to sensitive information stored in `config.php`. `config.php` contains information that could allow direct access to the database. This issue has been addressed in version 3.2.14 and all users are advised to upgrade. There are no k
ss to the database. This issue has been addressed in version 3.2.14 and all users are advised to upgrade. There are no known workarounds for this vulnerability. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://github.com/LabRedesCefetRJ/WeGIA/security/advisories/GHSA-xxqg-p22h-3f32
CVE ID: CVE-2025-26617 State: PUBLISHED Published: 2025-02-18T20:29:17.367Z Last Updated: 2025-02-19T15:47:34.593Z Vendors: LabRedesCefetRJ Products: WeGIA Problem Types: CWE-89, CWE-284 Description: WeGIA is an open source Web Manager for Institutions with a focus on Portuguese language users. A SQL Injection vulnerability was discovered in the WeGIA application, `historico_paciente.php` endpoint. This vulnerability could allow an attacker to execute arbitrary SQL queries, allowing unauthorized access to sensitive information. This issue has been addressed in version 3.2.14 and all users are advised to upgrade. There are no known workarounds for this vulnerability. Additional Analyst Notes:
4 and all users are advised to upgrade. There are no known workarounds for this vulnerability. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://github.com/LabRedesCefetRJ/WeGIA/security/advisories/GHSA-f654-c5r5-jx77