Skip to content
OpenAdvisories

Vendor

gentoo

2 known vulnerabilities.

Products

soko 2 Linux 0
All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • Critical 9.1
    CVE-2023-28424

    Soko SQL Injection vulnerability

    Soko if the code that powers packages.gentoo.org. Prior to version 1.0.2, the two package search handlers, `Search` and `SearchFeed`, implemented in `pkg/app/handler/packages/search.go`, are affected by a SQL injection via the `q` parameter. As a result, unau…

    gentoo soko