Skip to content
OpenAdvisories

Package · npm

dbgate-api

2 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • High 8.8
    CVE-2026-48017 Public exploit

    DbGate: Remote Code Execution via functionName injection in loadReader endpoint

    DbGate is cross-platform database manager. In versions 7.1.8 and prior, the POST /runners/load-reader endpoint in DbGate accepts a functionName parameter that is directly interpolated into a JavaScript code template without any sanitization or validation. An …

    dbgate dbgate dbgate-api npm