Skip to content
OpenAdvisories

Package · Go

github.com/prest/prest

2 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

2 results · Clear filters · Feed

  • Critical 9.3
    CVE-2025-58450

    pREST has Systemic SQL Injection Vulnerability

    pREST (PostgreSQL REST), is an API that delivers an application on top of a Postgres database. SQL injection is possible in versions prior to 2.0.0-rc3. The validation present in versions prior to 2.0.0-rc3 does not provide adequate protection from injection …

    prest prest github.com/prest/prest github.com/prest/prest/v2 Go
  • Critical 9.8
    GHSA-wm25-j4gw-6vr3

    pREST vulnerable to jwt bypass + sql injection

    ### Summary Probably jwt bypass + sql injection or what i'm doing wrong? ### PoC (how to reproduce) 1. Create following files: docker-compose.yml: ``` services: postgres: image: postgres container_name: postgres_container_mre environment: POSTGRES_USER: test_…

    github.com/prest/prest Go