Skip to content
OpenAdvisories

Package · npm

dbgate-web

2 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

2 results · Feed

  • Low 3.5
    CVE-2026-6216

    DbGate SVG Icon String FontIcon.svelte cross site scripting

    A security vulnerability has been detected in DbGate up to 7.1.4. This affects an unknown function of the file packages/web/src/icons/FontIcon.svelte of the component SVG Icon String Handler. Such manipulation of the argument applicationIcon leads to cross si…

    dbgate-web npm
  • High 8.3
    CVE-2026-34725

    dbgate-web: Stored XSS in applicationIcon leads to potential RCE in Electron due to unsafe renderer configuration

    DbGate is cross-platform database manager. From version 7.0.0 to before version 7.1.5, a stored XSS vulnerability exists in DbGate because attacker-controlled SVG icon strings are rendered as raw HTML without sanitization. In the web UI this allows script exe…

    dbgate dbgate dbgate-web npm