Vendor

jackalope

1 known vulnerabilities.

Products

jackalope-doctrine-dbal 1

All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

High 8.5

CVE-2021-43822

SQL injection in jackalope/jackalope-doctrine-dbal

Jackalope Doctrine-DBAL is an implementation of the PHP Content Repository API (PHPCR) using a relational database to persist data. In affected versions users can provoke SQL injections if they can specify a node name or query. Upgrade to version 1.7.4 to res…

jackalope jackalope-doctrine-dbal jackalope/jackalope-doctrine-dbal Packagist

Dec 13, 2021