GHSA-68wg-qv6r-j4vpCriticalCVSS 9.8

SQL Injection in usmanhalalit/pixie

Published
November 20, 2019
Last Modified
January 9, 2023

🔗 CVE IDs covered (1)

CVE-2019-10766 →

📋 Description

Pixie versions 1.0.x before 1.0.3, and 2.0.x before 2.0.2 allow SQL Injection in the limit() function due to improper sanitization.

🎯 Affected products2

  • composer/usmanhalalit/pixie:< 1.0.3
  • composer/usmanhalalit/pixie:>= 2.0.0, < 2.0.2

🔗 References (4)