Skip to content
OpenAdvisories

Package · Packagist

billabear/billabear

1 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

1 result · Feed

  • High 8.8
    CVE-2026-31069

    BillaBear is Vulnerable to SQL Injection in the EventRepository

    BillaBear (all versions prior to Jan 2026) contains a SQL Injection vulnerability in the EventRepository. User-controlled input from metric filter names and aggregation properties is directly interpolated into SQL queries using sprintf() without proper saniti…

    billabear/billabear Packagist