Skip to content
OpenAdvisories

Product · drogonframework

drogon

2 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

2 results · Clear filters · Feed

  • High 7.3
    CVE-2026-94144

    drogonframework drogon ORM Criteria.cc makeCriteria sql injection

    A flaw has been found in drogonframework drogon up to 1.9.13. This affects the function makeCriteria in the library orm_lib/src/Criteria.cc of the component ORM. Executing a manipulation of the argument filter can lead to sql injection. The attack may be perf…

    drogonframework drogon
  • High 7.3
    CVE-2026-94143

    drogonframework drogon ORM Mapper Mapper.h orderBy sql injection

    A vulnerability was detected in drogonframework drogon up to 1.9.13. Affected by this issue is the function Mapper::orderBy in the library Mapper.h of the component ORM Mapper. Performing a manipulation of the argument sort results in sql injection. The attac…

    drogonframework drogon