Skip to content
OpenAdvisories

Package · Ubuntu

z-push

1 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

1 result · Feed

  • Critical 9.0
    CVE-2025-8264

    z-push/z-push-dev SQL Injection Vulnerability

    Versions of the package z-push/z-push-dev before 2.7.6 are vulnerable to SQL Injection due to unparameterized queries in the IMAP backend. An attacker can inject malicious commands by manipulating the username field in basic authentication. This allows the at…

    z-push/z-push-dev z-push Ubuntu Packagist