Skip to content
OpenAdvisories

Package · RubyGems

pghero

2 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

2 results · Feed

  • High 7.5
    CVE-2023-22626

    PgHero Allows Information Disclosure Through EXPLAIN Feature

    PgHero before 3.1.0 allows Information Disclosure via EXPLAIN because query results may be present in an error message. (Depending on database user privileges, this may only be information from the database, or may be information from file contents on the dat…

    pghero RubyGems
  • High 8.1
    CVE-2020-16253

    PgHero gem allows CSRF

    The PgHero gem through 2.6.0 for Ruby allows CSRF.

    pghero RubyGems